Google Finds US Gov iPhone Exploit Kit in Criminal Hands

Google Traces US Government iPhone Exploit Kit to Russian Spies and Criminals

Google identifies Coruna, a 23-exploit iOS toolkit linked to US intelligence, now used by Russian spies and Chinese criminals. 42,000 devices hit

Google's Threat Intelligence Group on Tuesday identified a 23-vulnerability iOS exploit kit called Coruna that appears to have traveled from a US government contractor through Russian espionage operations into the hands of Chinese cybercriminals. Mobile security firm iVerify, which analyzed the toolkit independently, estimates roughly 42,000 iPhones have already been compromised in the criminal campaign alone. Apple fixed the bugs in iOS 26. Older versions? Still wide open. That means iOS 13 through 17.2.1, anything Apple shipped between September 2019 and December 2023.

This article continues below.

Sign up once, read everything for free. No algorithms, no fluff—just the AI intel that actually matters for your work.

Get free access →
Already have an account? Sign in

Great! You’ve successfully signed up.

Welcome back! You've successfully signed in.

You've successfully subscribed to Implicator.ai.

Success! Check your email for magic link to sign-in.

Success! Your billing info has been updated.

Your billing was not updated.