Coruna iOS Exploit Kit Targets Multiple Threat Actors

Coruna iOS Exploit Kit Targets Multiple Threat Actors

First seen 3 Mar 2026, 19:10 UTC •ForbesAnalyticsinsightBgrPhonearenaMixvale.Br+194 •33.3

Article Content

Browse articles
ThreatCluster

The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors, including surveillance customers, cyberspies, and crypto-thieves, are utilizing this exploit kit for financial crime.

How this analysis works

Timeline

2023-08-14
CVE-2022-48503 published
2024-01-23
CVE-2024-23222 published
2025-10-20
CVE-2022-48503 added to CISA KEV (active exploitation)
2025-11-05
CVE-2023-43000 published
2026-03-03
Coruna exploit kit reported by Helpnetsecurity and Mandiant

Extracted Entities

1 / 2