The Coruna iOS exploit kit is likely an updated version of the exploitation framework used in Operation Triangulation.
Law enforcement actions and a relative dearth of zero-day bugs appear to have contributed to a sharp decline in exploit kit activity in recent months. It's too soon, however, to say whether the ...
TA446 used leaked DarkSword on March 26 to target iOS devices, prompting Apple alerts and widening mobile espionage risks.
Coruna reuses Triangulation kernel exploits targeting iOS 13–17.2.1 devices, expanding attacks into mass exploitation campaigns.
Russian Star Blizzard APT has targeted numerous entities with the DarkSword iOS exploit in an Atlantic Council-themed campaign.