Hackers Used New Exploit Kit to Compromise Thousands of iPhones

Google’s Threat Intelligence Group uncovered Coruna, a powerful iOS exploit kit (23 exploits across five chains) active in 2025 that targeted iOS versions from 2019–2023, was reused by multiple threat ecosystems (including UNC6353 and UNC6691), and was used to compromise thousands of iPhones; the report details exploited CVEs, attack-delivery methods (browser-based fingerprinting and hidden iFrames), and recommended mitigations (patching, Lockdown Mode, MTD, network monitoring, app allowlists, and incident response testing).