By Marcus Mendes
Publication Date: 2026-03-04 01:02:00
Google’s Threat Intelligence Group and security company iVerify have shared details about Coruna, an exploit kit that chains multiple vulnerabilities to target iPhones running older iOS versions. Here are the details.
Under the hood
As spotted by Wired, a post published today on the Google Cloud Blog reveals details of an exploit kit called Coruna, which leverages five full iOS exploit chains and 23 vulnerabilities to compromise unpatched iPhones running iOS 13 through iOS 17.2.1.
At a very high level, the Coruna exploit kit works by chaining multiple vulnerabilities to progressively breach the iPhone’s security layers.
After visiting a malicious site that uses hidden JavaScript to check the device model, system version, and other security settings, the attack can take multiple routes to bypass core iOS protections, gain high-level privileges, and install malware that can collect data or even download additional modules.
Interestingly, Google…
