Ad copy

Almost three years ago, Kaspersky discovered that its own employees' iPhones had been attacked. This APT campaign became known as Operation Triangulation. During our research we uncovered four zero-day vulnerabilities and one of the most complex iOS attack chains ever publicly documented to date. This week, our GReAT team confirmed that the story didn't end there. After Google and iVerify reported on the Coruna exploit kit in March, our researchers analyzed its attack chain. The result: Coruna is built on the same framework as Operation Triangulation. Same codebase, actively maintained and expanded — now used not just for espionage, but in financially motivated attacks and indiscriminate watering-hole campaigns. A tool that once required nation-state resources to deploy is now accessible to a much wider range of threat actors. Millions of users with unpatched devices are at risk. Update your iOS. Read our full technical analysis