"Google revealed that over the course of 2025 it discovered that a sophisticated iPhone-hacking toolkit had been used in a series of global attacks. The toolkit, dubbed "Coruna" by its original developer, was made of 23 different components first used "in highly targeted operations" by an unnamed government customer of an unspecified "surveillance vendor.""
"Two former employees of government contractor L3Harris told TechCrunch that Coruna was, at least in part, developed by the company's hacking and surveillance tech division, Trenchant. The two former employees both had knowledge of the company's iPhone hacking tools and confirmed that Coruna was definitely an internal name of a component."
"It was then used by Russian government spies against a limited number of Ukrainians and finally by Chinese cybercriminals "in broad-scale" campaigns with the goal of stealing money and cryptocurrency, demonstrating how stolen surveillance tools proliferated across multiple hostile actors."
Google discovered a sophisticated iPhone-hacking toolkit named Coruna used in global attacks throughout 2025. The toolkit contained 23 components originally developed for a U.S. government surveillance vendor. Russian government spies deployed it against Ukrainian targets, while Chinese cybercriminals used it in large-scale campaigns to steal money and cryptocurrency. Former L3Harris employees confirmed the toolkit was developed by the company's hacking division, Trenchant. The tools, intended for Western intelligence operations, were compromised and distributed to various hostile actors, representing a significant breach of classified surveillance technology.
Read at TechCrunch
Unable to calculate read time
Collection
[
|
...
]