Summary

The Coruna iOS exploit kit has been found to reuse kernel exploit code from the 2023 Operation Triangulation campaign. This discovery highlights the ongoing threat posed by the Coruna kit, which targets Apple iOS devices.

Key Points

• The Coruna iOS exploit kit utilizes an updated version of the kernel exploit from the 2023 Operation Triangulation campaign.
• Kaspersky researchers identified the link between Coruna and the Triangulation exploit code.
• The vulnerabilities targeted by Coruna are specific to Apple iOS devices.
• The original Triangulation campaign was uncovered in 2023, indicating the persistence of this exploit code.

Analysis

The reuse of the Triangulation exploit code in the Coruna iOS kit underscores the adaptability and persistence of threat actors targeting iOS devices. By updating existing exploit code, attackers can continue to exploit known vulnerabilities, posing a significant risk to users and organizations relying on Apple devices. This highlights the importance of continuous monitoring and patching of vulnerabilities in widely used platforms.

Conclusion

IT professionals should prioritize patching iOS devices to mitigate the risks posed by the Coruna exploit kit. Regular updates and monitoring for unusual activity can help protect against these persistent threats.