Malware And CampaignsCampaign

Coruna iOS exploit framework reusing Operation Triangulation code

March 26, 2026The Hacker News, BleepingComputer, Kaspersky

Boris Larin says analysis of the Coruna exploit kit found code overlaps with Operation Triangulation and published a full write-up.

🚨 Coruna turns a 2023 #iOS espionage exploit into a broader attack kit.
Kaspersky confirms it reuses and evolves the Triangulation kernel exploit, now updated for newer chips and iOS versions and still actively maintained.
Kaspersky GReAT's binary analysis links the Coruna exploit kit directly to the Operation Triangulation framework — same kernel exploit author confirmed.
Code includes checks for A17/M3 chips, iOS through 17.2.
We analyzed the Coruna exploit kit and found intriguing code overlaps with Operation Triangulation.
The Hacker News
BleepingComputer
Kaspersky
Nicolas Krassas
Boris Larin
threat-intelexploit-kitiosreverse engineering

See what experts are saying right now

This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.

← Back to Cyber Security