An iPhone-hacking toolkit used by Russian spies likely came from U.S military contractor

Google and independent researchers found a government-grade iPhone exploit toolkit called “Coruna” — reportedly developed as part of L3Harris’s Trenchant suite — was used in targeted espionage (Operation Triangulation/UNC6353) and later repurposed by criminal groups in wide-scale campaigns; the toolkit includes multiple zero-day exploits (Photon, Gallium) affecting iOS 13–17.2.1 and appears to have been leaked or sold from a U.S. contractor to brokers and adversaries.