A New Threat to Digital Sovereignty
In the ever-evolving world of digital assets, vigilance is paramount. Recently, a major alert was issued by Google regarding a new exploit kit, dubbed "Coruna," specifically targeting iPhone users. This alarmingly sophisticated kit is designed to steal sensitive information, including seed phrases and digital wallet data, directly threatening the financial sovereignty of many individuals. The Crypto P2P Club, true to its mission of education and protection, deciphers this threat and provides you with the keys to guard against it.
What is the "Coruna" Exploit Kit?
The "Coruna" kit is a set of malicious tools identified by Google's security researchers. It stands out for its ability to exploit security flaws on iPhones, particularly those running iOS 13 up to version 17.2.1. Initially linked to state-sponsored surveillance operations, this kit has unfortunately been repurposed and is now being used by malicious actors for large-scale criminal activities, including the theft of digital assets [1] [2].
Modus Operandi of the Scam:
- iOS Vulnerability Exploitation: Coruna leverages 23 different vulnerabilities within the iOS operating system, allowing attackers to take control of the device [3].
- Malicious Websites: Victims are often directed to fake websites that mimic legitimate digital asset platforms. These sites are designed to infect the device upon visit [4].
- Theft of Sensitive Data: Once the iPhone is compromised, the kit actively searches for recovery phrases (seed phrases) and other digital wallet data, enabling attackers to drain users' funds [5].
Current Figures and Impact
While exact figures of victims are difficult to establish in real-time, reports indicate that thousands of iPhones may have been compromised. Financial losses are potentially substantial, highlighting the urgency of taking preventive measures. Google has also intensified its alerts and efforts to counter this threat [6].
How to Protect Yourself from "Coruna"? Crypto P2P Club Recommendations
Protecting your digital assets relies on constant vigilance and adopting best practices. The Crypto P2P Club emphasizes the following points:
- Immediate iOS Updates: The most crucial recommendation is to keep your iOS operating system up to date. Apple regularly releases security patches that close vulnerabilities exploited by kits like Coruna. Enable automatic updates or check them manually [7].
- Activate Lockdown Mode: For iPhone users who are more exposed or concerned about their security, iOS's Lockdown Mode (available since iOS 16) offers extreme protection by limiting certain device functionalities, thereby reducing the attack surface [8].
- Extreme Vigilance with Links and Websites: Never click on suspicious links and always verify the URL of websites before entering sensitive information. Scammers often mimic well-known platforms.
- Use Hardware Wallets: For long-term storage of your digital assets, hardware wallets offer superior security by keeping your private keys offline. Sahal Wallet, while convenient for daily transactions, should be used with caution for large amounts of assets [9].
- Recovery Phrase (Seed Phrase): Essential reminder: your recovery phrase is the key to your funds. Never share it, never store it online, and make sure to keep it in a safe, offline, and physical location [10].
The Role of the Crypto P2P Club
The Crypto P2P Club is committed to providing you with the information and tools necessary to navigate the digital ecosystem safely. Faced with threats like Coruna, our mission is to strengthen your knowledge of self-custody and best security practices, so you can "Learn, Own, Share" with confidence. We firmly believe that financial freedom begins with knowledge and the ability to protect one's own assets.
Conclusion: Stay Informed, Stay Protected
The "Coruna" scam is a stark reminder of the need for constant vigilance in the digital world. By following the recommendations of Google and the Crypto P2P Club, and by adopting a proactive approach to security, you can significantly reduce risks. Your digital sovereignty is in your hands.
Sources:
- [1] Google Cloud Blog. "Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit." https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit
- [2] The Hacker News. "Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains." https://thehackernews.com/2026/03/coruna-ios-exploit-kit-uses-23-exploits.html
- [3] Security Affairs. "Google uncovers Coruna iOS Exploit Kit targeting iOS 13-17.2.1." https://securityaffairs.com/188928/security/google-uncovers-coruna-ios-exploit-kit-targeting-ios-13-17-2-1.html
- [4] BleepingComputer. "Spyware-grade Coruna iOS exploit kit now used in crypto theft attacks." https://www.bleepingcomputer.com/news/security/spyware-grade-coruna-ios-exploit-kit-now-used-in-crypto-theft-attacks/
- [5] gHacks.net. "Leaked iPhone Spyware 'Coruna' Now Steals Crypto and Sensitive User Data." https://www.ghacks.net/2026/03/04/leaked-iphone-spyware-coruna-now-steals-crypto-and-sensitive-user-data/
- [6] Forbes. "Disconnect From All These Mobile Networks, Google Warns." https://www.forbes.com/sites/zakdoffman/2026/01/16/disconnect-from-all-these-mobile-networks-google-warns/
- [7] Apple Support. "About Lockdown Mode." https://support.apple.com/en-us/HT213421
- [8] Zimperium. "Coruna iOS Exploit Kit Highlights the Need for Multi-Layer Mobile Defense." https://zimperium.com/blog/coruna-ios-exploit-kit-highlights-the-need-for-multi-layer-mobile-defense
- [9] Crypto P2P Club. "Secure and Transmit Your Digital Assets with Sahal Wallet." https://crypto-p2p-club.com/fr/article/securiser-et-transmettre-vos-actifs-numeriques-avec-sahal-wallet
- [10] Crypto P2P Club. "Sahal Wallet Tutorial - Create My First Wallet." https://crypto-p2p-club.com/fr/tutoriels/sahal
Disclaimer: This article is provided for informational purposes only and does not constitute financial advice. Investments in digital assets carry risks. Always do your own research and consult a professional before making any investment decisions.