Google Unveils Powerful iPhone Exploit Kit Targeting Crypto Wallets

Threat researchers at Google have made a significant discovery in the world of cybersecurity, uncovering a powerful exploit kit targeting Apple iPhone users.

The kit, named Coruna by its developers, is designed to steal crypto wallet seed phrases from vulnerable devices. According to Google's Threat Intelligence Group (GTIG), Coruna exploits five full iOS chains and has a total of 23 exploits, including previously unknown ones.

GTIG first discovered the kit in February 2025 and has since tracked its use by a suspected Russian espionage group against Ukrainians and fake Chinese crypto websites. The group's findings suggest that Coruna is delivered through compromised websites that use JavaScript to fingerprint devices and deliver the appropriate exploit.

The researchers urge iPhone users to update their devices to the latest software version, which can protect them from this type of attack. Alternatively, they can enable Lockdown Mode, a feature provided by Apple that can counter sophisticated attacks like Coruna's.