Skip to content
Coruna iOS Exploit Kit Targets Multiple Threat Actors

Coruna iOS Exploit Kit Targets Multiple Threat Actors

First seen 3 Mar 2026, 19:10 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 27, 2026 at 15:44 UTC

The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors, including surveillance customers, cyberspies, and crypto-thieves, are utilizing this exploit kit for financial crime.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 202d ago How this analysis works

Timeline

2023-08-14
CVE-2022-48503 published
2024-01-23
CVE-2024-23222 published
2025-10-20
CVE-2022-48503 added to CISA KEV (active exploitation)
2025-11-05
CVE-2023-43000 published
2026-03-03
Coruna exploit kit reported by Helpnetsecurity and Mandiant

More articles in this cluster (374)

Following this threat?

Track WannaCry, TA446 and Coruna in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed