Google has uncovered a "powerful" toolkit used to hack iPhones by exploiting a vast number of security vulnerabilities. These flaws allow attackers to bypass security systems and gain access to core device components.
اضافة اعلان
The company stated that this collection of vulnerabilities, known as "Coruna," has been widely deployed in cyberattacks. It appears to have been used by multiple entities, including cybercriminals seeking financial theft.
The attack typically begins when a user clicks on a malicious link, enabling attackers to execute a chain of tools designed to bypass and compromise the iPhone's operating system defenses. According to Google, the attack relies on exploiting approximately 23 security vulnerabilities chained together to facilitate full control over the device.
The origin of these tools remains unclear; researchers from Google’s Threat Intelligence Group (GTIG) described the attack as "mysterious." In contrast, iVerify, a mobile security firm, indicated it has evidence suggesting these tools may have originated as a U.S. government utility before subsequently leaking and spreading more broadly.
Researchers first detected these vulnerabilities in February 2025. Since then, they have been utilized across various websites where attackers attempt to lure visitors into clicking malicious links to infect their phones.
These vulnerabilities affect iPhones running iOS versions ranging from iOS 13 to iOS 17.2.1 (the latter of which was first released in December 2023). Experts emphasize that updating Apple devices to the latest OS version is sufficient to protect against this type of attack.
