Google Warning: Beware of Cryptocurrency Scams Using New iPhone Vulnerability Toolkits

PANews March 5 News, according to Cointelegraph reports, the Google Threat Intelligence Group released a report stating that a new iOS exploit kit called “Coruna” has been discovered. It targets iPhones running iOS 13.0 to 17.2.1 to steal cryptocurrency wallet seed phrases. The kit includes 5 complete iOS exploit chains and 23 vulnerabilities, some of which were previously undisclosed.
GTIG first identified this kit in February 2025 and traced it to being used by suspected Russian espionage groups against Ukrainian users. It later appeared on fake Chinese crypto websites, aiming to steal digital assets. When users access these sites via iOS devices, the kit scans for text containing seed phrases, “backup phrases,” “bank accounts,” and other keywords, and extracts sensitive information from crypto apps like Uniswap and MetaMask. GTIG urges iPhone users to update their devices to the latest iOS version or enable “Lockdown Mode” to defend against attacks. The kit is not compatible with the latest iOS versions.