Uh Oh: Government Hacking Tools Are Now Attacking iPhones Worldwide!

Recent security reports have revealed the leak of a sophisticated hacking toolkit, originally designed for government purposes. This toolkit has now appeared in the hands of cybercriminals targeting iPhones running older iOS versions. This is a serious development that highlights the growing gap between official surveillance tools and cybercrime. Security researchers first spotted this toolkit, named Coruna, during a spying attempt by a surveillance service provider working for a government entity. Later, its use was documented in financial attacks across Asia and Ukraine. This clearly shows how these tools are moving from restricted government use to illicit trade on the black market. The Coruna toolkit relies on a complex chain of 23 interconnected security vulnerabilities. These allow for multiple ways to hack into targeted devices just by visiting a malicious link, in what's known as 'watering hole' attacks, without the victim needing to do anything else. Vulnerable devices include iPhone models running iOS versions from iOS 13 up to iOS 17.2.1. This means millions of users could be at risk of being hacked if they haven't installed the latest security updates. Cybersecurity experts emphasize that relying on older operating system versions leaves the door open for exploits of vulnerabilities that have already been fixed. The leak of the Coruna tools raises concerns about a new black market emerging for 'used exploits,' where government hacking tools are resold for extra profit. Technical analysis also showed that components of this toolkit are similar to tools used in previous spying campaigns that targeted sensitive entities. This brings to mind the EternalBlue leak, which was later used in the global WannaCry ransomware attack, causing widespread damage to organizations and companies worldwide. Experts point out that the spread of advanced surveillance tools outside official channels represents a growing threat to global digital security. This is especially true as hackers become more capable of buying or repurposing tools that were once exclusive to intelligence agencies. They stress the urgent need to update devices immediately to the latest iOS versions as the first line of defense against these complex attacks.