iPhones targeted by 'new and powerful' malware - and "Coruna" may have been developed by the US government

• Google researchers discover highly complex exploit kit, dubbed 'Coruna'
• The kit was deployed by a surveillance software customer, before being used by Russian and Chinese threat actors
• Documentation from the kit shows evidence of being developed by the US government

A highly complex exploit kit targeting iPhones has been discovered by Google Threat Intelligence Group (GTIG) researchers, which contains non-public exploitations and bypasses.

The kit, tracked as “Coruna”, was initially used in targeted attacks by a customer of an unnamed surveillance company, before also popping up in use by Russian and Chinese threat actors before the full kit could be retrieved by GTIG.

Further research by the iVerify team into the sources of the exploits contained within the kit has indicated that the kit may have been developed as a US government framework.