Operation Triangulation — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
13
occurrences
First Seen
March 3, 2026
Last Seen
April 16, 2026

Operation Triangulation is a threat campaign tracked across 4 threat clusters and 13 intelligence report mentions on ThreatCluster. First observed March 3, 2026; most recent activity April 16, 2026.

Related Threat Clusters

  • Coruna Exploit Kit Linked to Operation Triangulation Framework

    Kaspersky's Global Research and Analysis Team has identified the Coruna exploit kit as an updated version of the Operation Triangulation framework used in a 2023 cyber-espionage campaign. The analysis revealed that one…

    3 articles · Updated March 26, 2026
  • Surge in Android Banking Trojans: Four Campaigns Identified

    Zimperium's zLabs has reported a significant increase in Android Banking Trojan activity, identifying four distinct campaigns: RecruitRat, SaferRat, Astrinox, and Massiv. These campaigns utilize advanced…

    97 articles · Updated April 16, 2026
  • Russia Mandates Custom Crypto for 5G Network Amid Security Concerns

    The Russian government is advancing legislation to require mobile operators to implement a domestically-developed encryption algorithm, NEA-7, for the country's 5G network. If passed, all new phones sold in Russia must…

    2 articles · Updated March 27, 2026
  • Coruna iOS Exploit Kit Targets Multiple Threat Actors

    The Coruna iOS exploit kit has emerged, targeting Apple iPhone models running iOS 13.0 to 17.2.1. It includes five exploit chains and 23 exploits, with advanced techniques that are non-public. Various threat actors,…

    372 articles · Updated March 3, 2026

Recent Intelligence Reports

  • T1422 — attack.mitre.org · April 16, 2026
  • Risky Bulletin: Russia to use custom crypto — Risky.Biz · March 27, 2026
  • Coruna exploit reveals evolution of Triangulation iOS exploitation framework — Securityaffairs.Co · March 26, 2026
  • Kaspersky identifies Coruna exploit kit as updated version of Operation Triangulation framework — Kaspersky · March 26, 2026
  • U.S. military contractor likely built iPhone hacking tools used by Russian spies in Ukraine — Techcrunch · March 10, 2026
  • US Defense Contractor Tools Found in Russian iPhone Spyware — Techbuzz.Ai · March 10, 2026
  • State-developed iPhone hacking tools reused by cybercriminals, Google warns — Thedailystar · March 4, 2026
  • Coruna exploit kit: Suspected government hacking tools surface in cybercriminal hands — Scworld · March 4, 2026

CVSS v3.1 Breakdown