Skip to main content
See every side of every news story
Published loading...Updated

Google Identifies Cybersecurity Threat Used By Hackers To Target Older iOS Versions Possibly Developed By US Government - Alphabet (NASDAQ:GOOGL)

  • On Tuesday, Google Threat Intelligence Group and iVerify disclosed Coruna, which has been used by a suspected Russian espionage group and Chinese cybercriminals targeting iPhones.
  • Google researchers said the spread appears driven by an active market for `second hand` zero-day exploits, while iVerify found code similarities suggesting the framework was built on U.S. government toolkit foundations.
  • Coruna leverages 23 techniques, including `five full iOS exploit chains` to target iPhones running iOS 13 through 17.2.1 and delivers PlasmaLoader, which Google recovered from fake Chinese sites.
  • Apple issued patches and worked with Google, and users unable to update to iOS 26 should enable Apple's Lockdown Mode, which Coruna detects and avoids.
  • Researchers note exploit brokers selling powerful zero‑days raises the risk that tools leak and are reused, while Cole cautioned this could become an `EternalBlue moment`.
Insights by Ground AI

26 Articles

Lean Left

Named "Coruna", this tool targeted both Ukrainians and Chinese cryptocurrency holders.

·Paris, France
Read Full Article
Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 77% of the sources are Center
77% Center

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

Wired broke the news in United States on Tuesday, March 3, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal