A newly identified exploit kit targeting Apple devices has raised concerns among cybersecurity researchers after it was found to contain multiple sophisticated vulnerabilities capable of compromising iPhones across a wide range of software versions.
The toolkit, dubbed “Coruna,” targets iPhones running iOS versions from 13.0 through 17.2.1, according to a report published by the Google Threat Intelligence Group
Researchers said the exploit kit includes five full iOS exploit chains and a total of 23 exploits, several of which rely on techniques that were previously unknown to the public.
Exploit chains are combinations of vulnerabilities that attackers use together to bypass security protections and gain deeper access to a device
In this case, the Coruna toolkit appears capable of leveraging multiple vulnerabilities to escalate privileges, potentially allowing attackers to gain control over targeted iPhones.
The researchers noted that some of the exploits used in Coruna had not been publicly documented before the discovery, suggesting that the toolkit may have been developed using advanced vulnerability research
Such capabilities are often associated with sophisticated cyber-espionage operations or commercial spyware tools designed to infiltrate mobile devices.
According to the report, the exploit kit was observed circulating in underground cybercrime markets, where it could potentially be used by malicious actors to launch targeted attacks against individuals, organizations, or high-value targets
Security experts warn that tools with multiple exploit chains significantly increase the likelihood of successful compromise, as attackers can attempt several attack paths if one vulnerability fails.
The findings highlight the ongoing security challenges faced by smartphone manufacturers as attackers continuously search for new vulnerabilities in widely used operating systems
Apple regularly releases software updates and security patches aimed at addressing newly discovered flaws and strengthening the defenses of its devices.
Cybersecurity analysts recommend that iPhone users keep their devices updated with the latest iOS versions and avoid installing software from untrusted sources
Prompt security updates remain one of the most effective ways to protect devices from newly discovered exploits and emerging mobile threats.
Execution-first marketing. Own every Web3 feed with Koinpr.com.