Back Securityaffairs.Co

Russia

Securityaffairs.Co •Pierluigi Paganini • March 30, 2026

Russia-linked TA446 is using the DarkSword iOS exploit kit in targeted phishing campaigns to compromise iPhone users. Russia-linked APT group TA446 (aka SEABORGIUM, ColdRiver, Callisto, and Star Blizzard) is using the DarkSword exploit kit in targeted spear-phishing campaigns against iOS devices. The attacks rely on malicious emails to compromise iPhones, highlighting a growing threat from […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Coruna iOS Exploit Kit Targets Multiple Threat Actors The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors, including surveillance customers, cyberspies, and crypto-thieves, are utilizing this exploit kit for financial crime. 372 sources 33

Extracted Entities

Russia

The full story

Extracted Entities

APT Groups (5)

Attack Types (1)

Countries (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)