Google warns of new Coruna iOS vulnerability toolkit targeting cryptocurrency wallets

TechubNews · 2026-03-05T07:04:43+00:00

Google has discovered a new iOS exploit kit called "Coruna" targeting iPhones running iOS 13.0 to 17.2.1, used to steal cryptocurrency wallet seed phrases. The kit contains multiple vulnerabilities and was suspected to be used by Russian espionage organizations. Google recommends users update to the latest iOS version or enable "Lockdown Mode" to defend against attacks.

TechubNews

2026-03-05 07:04:43

Abstract generation in progress

Techub News reports that Google Threat Intelligence Team has discovered a new iOS exploit kit called “Coruna” that targets iPhones running iOS 13.0 to 17.2.1, stealing cryptocurrency wallet seed phrases. The kit includes five complete iOS exploit chains and 23 vulnerabilities, some of which have not been publicly disclosed before. Google first identified the kit in February 2025. It was suspected to be used by Russian espionage groups against Ukrainian users and later appeared on fake Chinese cryptocurrency websites to steal digital assets. When users visit these sites, the kit scans and extracts text containing keywords like seed phrases and backup phrases, targeting apps such as Uniswap and MetaMask to steal sensitive information. Google advises iPhone users to update to the latest iOS version immediately or enable “Lockdown Mode” to defend against such attacks. The kit is incompatible with the latest iOS versions.

UNI0.82%

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes