iPhone Users Warned: Crypto Scams Can Trigger ‘Coruna’ iOS Exploits

Coruna targets Apple devices running iOS 13.0 through iOS 17.2.1, which, let’s face it, is a wide range. And it doesn’t come empty-handed; oh no, it bundles a delightful package of five full exploit chains and 23 exploits. How generous. GTIG says they tracked the kit’s evolution over 2025, from its humble beginnings as a tool for a commercial surveillance company to its more ambitious later use, where it employed “watering hole” attacks on compromised Ukrainian websites. Finally, it blossomed into full-scale distribution via Chinese-language scam sites tied to a financially motivated actor they charmingly refer to as UNC6691. Such whimsy in nomenclature.






