I just noticed a rather notable security alert from Google. Their Threat Intelligence team discovered an exploit toolkit called Coruna, which targets iPhone devices running iOS from version 13.0 to 17.2.1. What worries me the most is that it has the ability to attack your cryptocurrency wallets.

This toolkit is not something small. It includes five exploit chains and a total of 23 different vulnerabilities, all aimed at extracting recovery phrases from encrypted wallets. It was first detected in February 2025, and, according to information, it has been linked to Russian intelligence activities targeting users in Ukraine. But it doesn’t stop there—this tool has also appeared on fake websites in Trung Quốc, with the purpose of stealing cryptocurrency assets.

If you’re an iPhone user, you need to take action right now. The best option is to update to the latest iOS version, because this exploit tool doesn’t work on newer updates. In addition, you can enable the Lock Mode feature to further protect your device. This is one of the reasons why keeping your device up to date is so important, especially if you’re using a cryptocurrency wallet on your phone.