A Possible US Government iPhone-Hacking Toolkit Is Now in the Hands of Foreign Spies and Criminals

Google researchers disclosed “Coruna,” a rare and highly sophisticated iPhone exploitation toolkit that leverages 23 distinct iOS zero-day vulnerabilities to silently compromise devices via malicious websites. The code has been observed in multiple contexts: initially linked to a surveillance-customer deployment, later used in an apparent Russian espionage campaign against Ukrainian sites, and subsequently repurposed by cybercriminals to steal cryptocurrency from Chinese-language sites; researchers warn the toolkit’s apparent proliferation poses a widespread mobile-security risk.