logo

Kaspersky dismisses claims Coruna iPhone exploit kit is connected to NSA-linked operation

ID: 824eee42-d57c-59a2-b624-3cfd5444d68f

STIX ID: report--824eee42-d57c-59a2-b624-3cfd5444d68f

Feed Name: The Register (Security)

Threat Score
90/100

Date Published: 2026-03-04

Date Updated: 2026-04-26

Author: Connor Jones

...
...

Google's Threat Intelligence Group disclosed 'Coruna', a sophisticated iOS exploit kit comprising 23 vulnerabilities and five exploit chains that target iOS 13–17.2.1; GTIG observed active campaigns deploying the kit via hidden iFrames on compromised Ukrainian and many fake Chinese websites, published technical details and IOCs, and noted the kit's high sophistication and possible resale in a zero-day market while Kaspersky disputed code-reuse attribution.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.