Why fingerprinting is the silent first move in modern mobile attacks

This article examines how advanced mobile attack kits perform device fingerprinting as a pre-exploit reconnaissance stage, using Coruna (a multi-chain iOS exploit kit) and Predator spyware as case studies to illustrate techniques—User-Agent parsing, IndexedDB-based private-browsing detection, WebRTC/WebGL/MathML rendering probes, and navigator.webdriver checks—and discusses how these checks protect expensive zero-day chains and how defenders can harden devices (e.g., Lockdown Mode, keeping OS updated) to cause attackers to abort.