logo

US military contractor likely built iPhone hacking tools used by Russian spies in Ukraine

ID: b83eeef9-f15e-58ae-a075-98fcd8dd37f1

STIX ID: report--b83eeef9-f15e-58ae-a075-98fcd8dd37f1

Feed Name: TechCrunch Security News

Threat Score
88/100

Date Published: 2026-03-10

Date Updated: 2026-04-23

Author: Lorenzo Franceschi-Bicchierai

...
...

TechCrunch reports that a sophisticated iPhone exploit toolkit named "Coruna," likely developed in part by L3Harris’s Trenchant unit and designed for government customers, was leaked and sold by a former employee to brokers; the toolkit’s zero-day exploits (including Photon and Gallium) have since been used in campaigns by Russian state-linked actors (Operation Triangulation/UNC6353) and Chinese cybercriminals to target iPhone users across multiple countries, enabling large-scale surveillance and financial theft.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.