US Government iPhone Hacking Toolkit "Coruna" Leaked to Russian Government and Cybercriminals

Google security researchers identified a sophisticated iPhone hacking toolkit named "Coruna," which exploits 23 distinct iOS vulnerabilities to bypass device defenses and silently install malware via compromised websites. The toolkit includes five complete hacking techniques and is attributed to a well-resourced, likely state-sponsored group, with code analysis suggesting English-speaking developers and US government origins. Former employees of defense contractor L3Harris confirmed Coruna was developed by its Trenchant division, a unit specializing in hacking and surveillance technology. The toolkit was reportedly sold to the Russian government by an L3Harris employee, leading to its unauthorized proliferation. Coruna's development required significant investment, estimated in the millions of dollars, and marks the first documented case of a US government iPhone exploit leaking to adversaries and cybercriminals.