Google Uncovers Coruna iOS Exploit Kit Used in Fake Financial Website Attacks

Google’s Threat Intelligence Group (GTIG) has uncovered Coruna, an iOS exploit kit that combines 23 known vulnerabilities and chains multiple attack techniques to compromise unpatched Apple devices. The case shows that older iOS versions can remain targets for exploitation at scale when users fail to upgrade, even after vulnerabilities have been publicly disclosed and patched.

GTIG’s latest investigation found that several hacking groups have deployed Coruna in real-world attacks. One Chinese hacking group set up numerous websites impersonating banks, financial services firms and cryptocurrency platforms, luring visitors with older iOS versions into triggering the exploits. The attacks primarily target devices without the latest security updates and use the 23 existing vulnerabilities to increase the chances of a successful compromise.