Helpnetsecurity
Coruna iOS Exploit Kit Targets Multiple Threat Actors
First seen 3 Mar 2026, 19:10 UTC
•



+194
•83% similarity
•33.3
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors, including surveillance customers, cyberspies, and crypto-thieves, are utilizing this exploit kit for financial crime.
ThreatCluster AI
Timeline
2023-08-14
CVE-2022-48503 published
2024-01-23
CVE-2024-23222 published
2025-10-20
CVE-2022-48503 added to CISA KEV (active exploitation)
2025-11-05
CVE-2023-43000 published
2026-03-03
Coruna exploit kit reported by Helpnetsecurity and Mandiant