• Home
• Technology

A recent security and technical investigation has revealed the leak of sophisticated hacking tools initially developed for military and intelligence purposes by a U.S. defense contractor, ultimately falling into the hands of hackers linked to foreign governments, targeting millions of iPhones worldwide.

The investigation showed that the toolset, named Coruna, consists of 23 different tools partially developed within a U.S.-based defense and intelligence technology company, enabling the exploitation of advanced iOS vulnerabilities with high precision.

Sources indicate that the tools were first used by a Western government entity, later transferred to hackers associated with the Russian government, and subsequently to Chinese cybercriminals seeking to steal funds and cryptocurrencies. Some components of Coruna were developed within the company’s offensive and surveillance technology division known as Trenchant, with Coruna being an internal name for one of the hacking modules. These technologies are typically sold to Western governments, including countries in the Five Eyes alliance: the U.S., Australia, Canada, New Zealand, and the U.K.

The investigation also highlighted a key incident in which the tools reached Russia. The former head of Trenchant, an Australian national, was convicted after admitting to stealing and selling eight hacking tools to a Russian company specializing in zero-day exploits, known as Operation Zero, for over $1 million. These companies exploit previously unknown vulnerabilities—zero-day flaws—allowing them to breach systems before they are patched, ultimately compromising millions of devices globally.