Leaked government-grade iPhone hacking tools now used to steal crypto and data from users

What we know so far: A powerful iOS exploit framework that once appeared to sit in the orbit of government surveillance work is now being reused in criminal schemes to drain cryptocurrency wallets and loot data from ordinary iPhone users. The exploit framework, dubbed Coruna, illustrates how government-grade tools can leak, mutate and reappear in the hands of foreign intelligence services and profit-driven crews.

According to new technical analyses from Google and mobile security firm iVerify, Coruna's technical core comprises five complete exploit chains and 23 distinct iOS vulnerabilities that bypass most of the major software defenses Apple has shipped in versions 13 through 17.2.1, effectively turning a web page into a silent infection vector for unpatched devices.

Google's Threat Intelligence Group says the kit targets Apple's WebKit browser engine, enabling drive-by compromise of any web browser on older iOS builds, using non-public exploitation tricks ...