Coruna: the framework used in Operation Triangulation

Researchers analyzed Coruna, a modular and highly sophisticated iOS exploit kit that bundles multiple kernel exploits (including updated code used in the Operation Triangulation APT), browser stagers, Mach-O loaders, and implants; it has been used in targeted espionage and later criminal watering‑hole and financially motivated attacks, and its reusable framework places unpatched iOS devices at significant risk—users should apply the latest security updates.