Tool
Coruna
- First Reported
- May 20, 2026
- Latest Reported
- Jun 17, 2026
Reported Context (2)
- In March 2026, exploit chains Coruna and DarkSword facilitated the mass targeting of iPhone users, illustrating the risks associated with the spread of nation-state-level cyber-intrusion capabilities. Recorded Future Sees High State Surveillance Risk in 31 Countries
- a broad range of iOS devices with a watering-hole attack similar in style to the delivery of the Coruna exploit kit. After careful analysis, a plethora of similarities to that campaign emerged, indicating that Compromised npm Package Delivered Coruna-Like iOS Exploit Framework
CVE (4)
Malware (12)
People (9)
Threat Actors (2)
MITRE ATT&CK (15)
Vendors (29)
Products (41)
Tools (13)
Industries (2)
Countries (49)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.