TLDR Tech / InfoSec
An iPhone-hacking toolkit used by Russian spies likely came from US military contractor
The 23-component iPhone exploit toolkit dubbed "Coruna" — targeting iOS 13 through 17.2.1 — has been traced by former employees and iVerify researchers to L3Harris's Trenchant division, originally built for Five Eyes intelligence customers. Former Trenchant GM Peter Williams, sentenced to seven years last month, sold eight company tools to Russian zero-day broker Operation Zero for $1.3M, providing a likely path by which Coruna reached Russian espionage group UNC6353 and later Chinese cybercriminals. Two Coruna exploits (Photon and Gallium) have also been linked to Operation Triangulation, the sophisticated iOS campaign first disclosed by Kaspersky in 2023.
Read the full story