Google Warns of ’Coruna’ iPhone Exploit Targeting Crypto Wallets

Security researchers at Google's Threat Intelligence Group have uncovered a sophisticated exploit kit dubbed 'Coruna' that targets older iPhones running iOS versions 13 through 17.2.1. The malware employs five exploit chains and 23 vulnerabilities to bypass Apple's security protocols, often initiating attacks through compromised websites.

Coruna's primary objective is crypto wallet data—specifically encrypted wallet files, login credentials, and mnemonic recovery phrases. Once extracted, these could grant attackers full control over victims' digital assets. The exploit silently profiles devices via JavaScript before deploying privilege escalation techniques to install spyware.

This development underscores the persistent tension between blockchain's decentralized ethos and the centralized vulnerabilities of consumer devices. As crypto adoption grows, so too does the attack surface for bad actors—a reality that demands both technological and behavioral countermeasures from holders.