Google warns of new Coruna iOS vulnerability suite targeting cryptocurrency wallets for attacks

Techub News reports, according to Cointelegraph, Google's Threat Intelligence Group has discovered a new iOS exploit kit named "Coruna" that can target iPhones running iOS versions 13.0 to 17.2.1 to steal cryptocurrency wallet seed phrases. The kit contains 5 complete iOS exploit chains and 23 vulnerabilities, some of which were previously undisclosed. Google first discovered the kit in February 2025; it was allegedly used by a suspected Russian espionage group against Ukrainian users and later appeared on fake Chinese cryptocurrency websites to steal crypto assets. When users visit these sites, the kit scans and extracts text containing keywords like seed phrases and backup phrases, targeting apps such as Uniswap and MetaMask to steal sensitive information. Google recommends iPhone users immediately update to the latest iOS version or enable "Lockdown Mode" to defend against such attacks, as the kit is incompatible with the latest iOS version.