Earlier this week, the Google Threat Intelligence Group (GTIG) published a report on an exploit kit specifically targeting older Apple iPhones. Those with an up-to-date iOS may only feel momentarily smug as it turns out the kit, called Coruna, can sink its hooks into a wide range of phones—though the malicious range of this exploit kit is far from the worst wrinkle in this story.
GTIG says it tracked Coruna's use throughout 2025, beginning with "highly targeted operations initially conducted by a customer of a surveillance vendor." However, the exploit framework is unlikely to have been built by cybercriminals alone, and may originate from hacking tools used by the US government.
