Google Uncovers Coruna: Sophisticated iOS Exploit Kit Targeting Crypto Wallets
Google's Threat Intelligence Group has exposed Coruna, a highly specialized exploitation kit designed to compromise iPhones running iOS versions 13.0 through 17.2.1. The malware operates through malicious websites—often disguised as cryptocurrency platforms—to harvest wallet recovery phrases and sensitive credentials.
Coruna employs multi-stage phishing campaigns, leveraging zero-day vulnerabilities in Apple's ecosystem. Once activated, the kit exfiltrates cryptographic keys and authentication data with surgical precision. The discovery underscores growing concerns about mobile device security in the crypto sector.
iPhone users are advised to immediately install pending iOS updates and enable Lockdown Mode. Vigilance against unsolicited crypto-related links remains critical, particularly when interacting with wallet applications or decentralized finance platforms.
