Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1

Summary

Google has identified a new and potent exploit kit called Coruna, also known as CryptoWaters, that targets Apple iPhones running iOS versions from 13.0 up to 17.2.1. This kit comprises five complete exploit chains and a total of 23 individual exploits, though it is not effective against the most recent iOS versions.

IFF Assessment

FOE

This exploit kit represents a significant threat to a wide range of iOS devices, indicating sophisticated and active exploitation efforts.

Defender Context

The discovery of Coruna highlights the continuous need for prompt patching of iOS devices, as exploit kits can leverage multiple vulnerabilities to compromise systems. Defenders should monitor for emerging threats and ensure robust endpoint security measures are in place to detect and mitigate such sophisticated attack tools.

Read Full Story →