Alert for iPhone users: Sophisticated scheme steals financial data and messages

Cybersecurity experts have discovered a new hacking tool that can secretly take control of iPhones.
This spyware, called "Coruna," was first identified by researchers at the Google Threat Intelligence Group (GTIG), who shared their findings on Tuesday.
The researchers said the tool could attack devices running iOS from 2019 to the end of 2023, advising affected users to update their phones immediately. GTIG has been monitoring the tool since 2025, while security firm iVerify speculates that it may have originally been a US government surveillance tool that was later leaked.
The Coruna package contains more than 20 security vulnerabilities that can be exploited to penetrate Apple devices, allowing hackers to bypass built-in protections.
The attack is designed in part to exploit the Safari browser and can be triggered in several ways, including when the user clicks a malicious link.
Once activated, the system can steal parts of texts and potentially access sensitive information such as photos, notes, and financial data stored on the device.
In July 2025, a Russian espionage group used the tool to hijack Ukrainian websites, while Chinese hackers allegedly distributed it through fake cryptocurrency platforms, according to PCMag.
The Coruna spyware appears to have been used in a variety of ways. Initially, it was linked to highly targeted attacks believed to involve foreign intelligence groups. Later, the same technology was used on fake websites to lure visitors to iPhones.
The attack is simple for the user: the victim only needs to open a malicious page on the iPhone. The page secretly checks the device details, including the model and software version. If the phone is vulnerable, the hidden code is automatically launched and begins the process of taking control.
Once inside the phone, the spyware installs additional software that allows hackers to collect sensitive information. It can scan photos and notes, ask for financial details, bank account references, or recovery phrases for cryptocurrencies.
The malware can also download additional tools from remote servers, expanding its reach beyond the initial infection. In some cases, investigators found modules designed to attack popular digital wallet apps and financial platforms.
Security experts said the discovery shows that mobile threats are evolving rapidly. For years, iPhones were considered difficult targets for major attacks. But the proliferation of advanced tools like Coruna shows that powerful hacking capabilities are becoming more accessible.
However, most users can be protected by updating their devices. Google said the tool does not work on newer versions of iOS, which include patches for the vulnerabilities exploited by the attack.
Researchers recommend that iPhone users install the latest updates as soon as possible. For those who can't update immediately, experts suggest enabling Lockdown Mode, a security feature that thwarts sophisticated attacks.
Happening now...
Germany, the "curse" of Rama and Berisha
ideas
top
Alfa recipes
TRENDING 
services
- POLICE129
- STREET POLICE126
- AMBULANCE112
- FIREFIGHTER128