Security researchers have identified a powerful iPhone hacking toolkit capable of infecting devices simply when users visit malicious websites.
The discovery was reported by Google’s Threat Intelligence Group, which warned the exploit kit could silently deliver malware without requiring victims to click anything.
The toolkit, known as Coruna, contains multiple exploit chains designed to target Apple devices running iOS versions from iOS 13 through 17.2.1.
Investigators said the framework includes five full exploit chains and at least 23 vulnerabilities affecting Apple’s mobile operating system.
Some of the vulnerabilities reportedly rely on previously unseen methods that bypass Apple’s built-in security protections on affected devices.
Researchers first observed parts of the toolkit in early 2025 when it appeared in an exploit chain linked to a customer of a commercial surveillance vendor.
The malicious framework uses JavaScript code that identifies a visitor’s iPhone model and operating system before delivering a tailored attack.