Sophisticated iPhone Hacking Toolkit 'Coruna' Linked to US Government, Now Exploited by Cybercriminals
A highly sophisticated iPhone hacking toolkit, dubbed 'Coruna,' has been discovered, leveraging 23 distinct iOS vulnerabilities. Evidence suggests the toolkit was originally developed by the US government, but has now leaked and is being used by both adversaries and cybercriminal groups.
Reports are emerging about a powerful iPhone hacking toolkit named **Coruna**, raising serious concerns about the security of **iOS** devices and the potential fallout from leaked government-developed cyber weapons.
### Coruna: A Deep Dive into the Toolkit
Security researchers at **Google** have released a detailed report describing **Coruna**. This toolkit employs five complete hacking techniques capable of bypassing all iPhone security measures. It silently installs malware on a device simply by visiting a website containing the exploit code. The toolkit exploits a total of 23 distinct vulnerabilities in iOS, indicating a highly sophisticated and well-resourced development team.
### US Government Origins?
According to **iVerify** cofounder Rocky Cole, the toolkit's code suggests it was initially written by English-speaking coders and required millions of dollars to develop. Cole stated to **WIRED**: "Itβs highly sophisticated, took millions of dollars to develop, and it bears the hallmarks of other modules that have been publicly attributed to the US government. This is the first example weβve seen of very likely US government toolsβbased on what the code is telling usβspinning out of control and being used by both our adversaries and cybercriminal groups."
### L3Harris Connection
**TechCrunch** reports that **Coruna** is likely of US origin, with two former employees of government contractor **L3Harris** claiming the company's hacking and surveillance tech division, Trenchant, at least partially developed it. These employees, speaking anonymously, had direct knowledge of the company's iPhone hacking tools.
### Leakage and Exploitation
The speculation is that an employee of **L3Harris**'s Trenchant division may have sold the toolkit to the Russian government, leading to its current exploitation by various actors. This incident underscores the significant risks associated with the development and handling of advanced cyber weapons, particularly the potential for them to fall into the wrong hands.