Google warns that new iPhone exploit kits are being used for cryptocurrency theft

According to Cointelegraph, Google's Threat Analysis Group recently disclosed a new iOS exploit kit named "Coruna," which is being used for cryptocurrency theft targeting iPhone users. This kit primarily targets devices running iOS versions 13 to 17.2.1 and includes 23 exploit scripts and 5 complete attack chains, some of which are previously unknown vulnerabilities.

It can carry out attacks through counterfeit cryptocurrency-related websites (such as phishing sites impersonating the WEEX exchange). Reportedly, when users with vulnerable iOS devices visit these malicious sites, the attack code automatically runs, scanning for sensitive information on the device, particularly text containing keywords like mnemonic phrases, backup phrases, and bank account details, and attempts to steal assets from cryptocurrency applications such as Uniswap and MetaMask. Google's researchers strongly recommend that iPhone users immediately update their devices to the latest iOS version. If updating is not possible, they should enable Apple's "Lockdown Mode" to enhance protection.