Quote:Security researchers say a powerful iPhone hacking framework once tied to surveillance operations is now being used in criminal campaigns to steal cryptocurrency and sensitive data from users.

The exploit kit, known as Coruna, reportedly contains multiple exploit chains capable of compromising vulnerable iPhones through malicious websites.

Hackers Target WebKit and Older iOS Versions

According to analysis from Google Threat Intelligence Group and mobile security company iVerify, the framework includes:

• Five full exploit chains
  
• 23 known iOS vulnerabilities
  
• Techniques that bypass several Apple security protections
  

The attacks target WebKit, the browser engine used by all iOS browsers. That means simply visiting a malicious web page could compromise devices running older iOS builds.

Once triggered, the exploit chain escalates privileges from the browser to kernel-level access, allowing attackers to install malware with root permissions.

Continue Reading...