iPhone Hacking Toolkit Tied to Russian Espionage May Have Originated in the U.S.

A leaked, highly advanced iPhone exploit framework named “Coruna,” reportedly developed by L3Harris's Trenchant, was stolen and sold to a sanctioned Russian broker (Operation Zero); the 23-module toolkit targeting iOS 13–17.2.1 has been used by Russian espionage actors (UNC6353) in campaigns such as Operation Triangulation and later adopted by Chinese cybercriminals for financial theft and crypto fraud.