The Return of Operation Triangulation: Coruna Exploit Kit Targets M3 and A17 Chips in Massive iOS Offensive

Coruna is a sophisticated, unified exploit kit targeting iPhones that reuses and updates kernel exploits (notably CVE-2023-32434 and CVE-2023-38606) to deliver and install a persistent spyware implant. Observed in the wild in both state-aligned watering-hole operations and financially motivated attacks, the framework fingerprints victims, decrypts ChaCha20-encrypted payloads, uses custom container formats to hide components, chains multiple kernel exploits (including previously unseen variants), and leverages a Launcher to clean artifacts and manage post-exploitation — users are strongly advised to apply the latest iOS security updates immediately.