IoCs (Indicators of Compromise) for the Coruna iOS iPhone Web Malware Client Side Exploits Serving Web Malware Exploitation Kit
March 17, 2026, 1:44 a.m.
Description
The intelligence details indicators of compromise for the Coruna iOS iPhone web malware exploitation kit. It provides MD5, SHA-1, and SHA-256 hashes for detected JavaScript payloads. The analysis lists numerous active domains serving the malware, including specific URLs delivering client-side exploits. The campaign involves a wide network of malicious domains and URLs targeting iOS devices. The extensive list of compromised and malicious infrastructure demonstrates the scale of this exploitation kit's operations, highlighting the ongoing threat to iPhone users through web-based attacks.
Tags
Date
- Created: March 16, 2026, 11:26 p.m.
- Published: March 16, 2026, 11:26 p.m.
- Modified: March 17, 2026, 1:44 a.m.
Indicators
- 01d6e008795b73a29359f92856bfeafef8210711c8a95f1cd2ab257f0a7492ba
- 8ac1175307ec784f367a0b21cd474c3bfc97d7b238ac4300ac5766ef45e63abb
- ea01377836441013d22112f4e5a7139c5ed0ebcf942d0836b9c088413e25692f
- c167b5f5e150f0ba855c038b4cf0dc7084c77ae2a70ba6248762e11f272c2ec1
- 52c510ecc3eed32f6f35c699474cb719c90482a2a4b37169cc478d2dbc0b8c89
- http://b27.icu/9e7e6ec78463c5e6bdee39e9f3f33d6fa296ea72.js
- http://goanalytics.xyz/88k4ez/group.html
- http://bestcryptocurrency.top
- http://sf2bisx5nhdkygn3l.xyz
- http://4kgame.us
- http://65sse.668ddf.cc
- http://6zvjeulzaw5c0mv.xyz
- http://b27.icu/7994d095b1a601253c206c45c120a80c4c0f3736.js
- http://lddx3z2d72aa8i6.xyz/group.html
- http://gem88.ac
- http://sadjd.mijieqi.cn/group.html
- http://b27.icu
- http://b27.icu/ee164f985cd9a7786dad6ca922b2de314dde9231.js
- http://gunbet.ac
- http://anygg.liquorfight.com/88k4ez/group.html
- http://rlau616jc7a7f7i.xyz
- http://share.4u.game
- http://lsnngjyu9x6vcg0.xyz
- http://b27.icu/8d646979cf7f3e5e33a85024b6cf2bc81a6c5812.js
- http://w2a315.tubeluck.com
- http://sj9ioz3a7y89cy7.xyz
- http://4u.game/group.html
- http://tubeluck.com
- http://uawwydy3qas6ykv.xyz
- http://appstoreconn.com/xmweb/group.html
- http://t7c.icu/group.html
- http://lk4x6x2ejxaw2br.xyz
- http://share.4u.game/group.html
- http://b27.icu/2839f4ff4e23733e6ba132e639ce96d36d23c6b6.js
- http://eg2bjo5x5r8yjb5.xyz
- http://8fn4957c5g986jp.xyz
- http://7ff.online/group.html
- http://b38w09ecdejfqsf.xyz
- http://res54allb.xn--xkrsa0078bd6d.com/group.html
- http://gemwin.ac
- http://y4w.icu/group.html
- http://appstoreconn.com
- http://gqjs3ra34lyuvzb.xyz
- http://xittgveqaufogve.xyz
- http://ai-scorepredict.com
- http://b27.icu/feeee5ddaf2659ba86423519b13de879f59b326d.js
- http://goanalytics.xyz
- http://4u.game
- http://7uspin.us/group.html
- http://so5083.tubeluck.com
- http://land.bingo777.now/88k4ez/group.html
- http://fxrhcnfwxes90q.xyz/group.html
- http://ios.teegrom.top/tuiliu/group.html
- http://b27.icu/5aed00feae0b817db276377c1306e5fcae67cb95.js
- http://bestcryptocurrency.top/details/group.html
- http://ajskbnrs.xn--jor0b302fdhgwnccw8g.com/gogo/list.html
- http://65sse.668ddf.cc/tuiliu/group.html
- http://w2a315.tubeluck.com/static/goindex/tuiliu/group.html
- http://ios.teegrom.top
- http://k96.icu/group.html
- http://osec2.668ddf.cc/tuiliu/group.html
- http://i.binaner.com/group.html
- http://7ff.online
- http://pepeairdrop01.com/static/analytics.html
- http://n49.top
- http://anygg.liquorfight.com
- http://b27.icu/d9a260b1c2f63ab5e5aac4261d8a0be5a8b64da0.js
- http://xmmfrkq9oat1daq.xyz
- http://ol67el6pxg03ad7.xyz
- http://b27.icu/25bb1b38371a67e977ed534d251d95b6f07aff90.js
- http://fxrhcnfwxes90q.xyz
- http://dd9l7e6ghme8pbk.xyz
- http://b27.icu/b903659316e881e624062869c4cf4066d7886c28.js
- http://b27.icu/group.html
- http://iphonex.mjdqw.cn
- http://k96.icu
- http://dbgopaxl.com/static/goindex/tuiliu/group.html
- http://sbet.ac
- http://hfteigt3kt0sf3z.xyz
- http://sj9ioz3a7y89cy7.xyz/list.html
- http://7p.game/group.html
- http://i9-bet.ac
- http://cy8.top
- http://lddx3z2d72aa8i6.xyz
- http://so5083.tubeluck.com/static/goindex/group.html
- http://ddus17.com/tuiliu/group.html
- http://pen0axt0u476duw.xyz
- http://res54allb.xn--xkrsa0078bd6d.com
- http://ztvnhmhm4zj95w3.xyz
- http://cdn.uacounter.com
- http://spin7.icu
- http://hui4tbh9uv9x4yi.xyz
- http://game.7p.game
- http://98a.online/group.html
- http://iphonex.mjdqw.cn/tuiliu/group.html
- http://land.bingo777.now
- http://yvgy29glwf72qnl.xyz
- http://mkkku.com/static/analytics.html
- http://98a.online
- http://7p.game
- http://ddus17.com
- http://dbgopaxl.com
- http://spin7.icu/group.html
- http://kanav.blog/group.html
- http://land.777bingos.xyz/88k4ez/group.html
- http://bet247.ac
- http://v2gmupm7o4zihc3.xyz
- http://pepeairdrop01.com
- http://n49.top/group.html
- http://b27.icu/055c5ab6028f7c0a3f8970975c332fe4417b054c.js
- http://goodcryptocurrency.top
- http://ose.668ddf.cc
- http://land.77bingos.com/88k4ez/group.html
- http://cryptocurrencyworld.top/details/group.html
- http://ajskbnrs.xn--jor0b302fdhgwnccw8g.com
- http://y4w.icu
- http://gdvynopz3pa0tik.xyz
- http://roy2tlop2u.xyz
- http://sadjd.mijieqi.cn
- http://7fun.icu
- http://cdn.uacounter.com/stat.html
- http://xfal48cf0ies7ew.xyz
- http://7fun.icu/group.html
- http://btrank.top
- http://3v5w1km5gv.xyz/group.html
- http://goodcryptocurrency.top/details/group.html
- http://cy8.top/group.html
- http://share.7p.game
- http://26a.online
- http://land.77bingos.com
- http://ose.668ddf.cc/tuiliu/group.html
- http://h4k.icu
- http://ai-scorepredict.com/static/analytics.html
- http://zcjdlb5ubkhy41u.xyz
- http://7uspin.us
- http://4kgame.us/group.html
- http://cryptocurrencyworld.top
- http://btrank.top/tuiliu/group.html
- http://binancealliancesintro.com/group.html
- http://vvri8ocl4t3k8n6.xyz
- http://seven7.vip
- http://26a.online/group.html
- http://t7c.icu
- http://osec2.668ddf.cc
- http://land.777bingos.xyz
- http://dd9l7e6ghme8pbk.xyz/group.html
- http://2s3b3rknfqtwwpo.xyz
- http://seven7.vip/group.html
- http://o08h5rhu2lu1x0q.xyz
- http://b27.icu/d715f1db179d73edcc180a8e376b3c17a09e389a.js
- http://3v5w1km5gv.xyz
- http://share.7p.game/group.html
- http://taisunwin.ac
- http://binancealliancesintro.com
- http://xjslbdt9jdijn15.xyz
- http://kanav.blog
- http://b27.icu/2cea19382f2b211e8caf609bc0bacc98f2557543.js
- http://i.binaner.com
- http://mkkku.com
- http://h4k.icu/group.html
Additional Informations
- i9-bet.ac
- goodcryptocurrency.top
- 2s3b3rknfqtwwpo.xyz
- gemwin.ac
- v2gmupm7o4zihc3.xyz
- hui4tbh9uv9x4yi.xyz
- ose.668ddf.cc
- ztvnhmhm4zj95w3.xyz
- sj9ioz3a7y89cy7.xyz
- ai-scorepredict.com
- roy2tlop2u.xyz
- btrank.top
- pen0axt0u476duw.xyz
- fxrhcnfwxes90q.xyz
- gunbet.ac
- dbgopaxl.com
- seven7.vip
- 3v5w1km5gv.xyz
- 7fun.icu
- lk4x6x2ejxaw2br.xyz
- bet247.ac
- cdn.uacounter.com
- rlau616jc7a7f7i.xyz
- lsnngjyu9x6vcg0.xyz
- yvgy29glwf72qnl.xyz
- sadjd.mijieqi.cn
- iphonex.mjdqw.cn
- hfteigt3kt0sf3z.xyz
- ddus17.com
- xmmfrkq9oat1daq.xyz
- gqjs3ra34lyuvzb.xyz
- xfal48cf0ies7ew.xyz
- vvri8ocl4t3k8n6.xyz
- sf2bisx5nhdkygn3l.xyz
- gdvynopz3pa0tik.xyz
- kanav.blog
- i.binaner.com
- ios.teegrom.top
- sbet.ac
- anygg.liquorfight.com
- res54allb.xn--xkrsa0078bd6d.com
- taisunwin.ac
- land.77bingos.com
- 4kgame.us
- lddx3z2d72aa8i6.xyz
- xittgveqaufogve.xyz
- zcjdlb5ubkhy41u.xyz
- uawwydy3qas6ykv.xyz
- gem88.ac
- mkkku.com
- b38w09ecdejfqsf.xyz
- ol67el6pxg03ad7.xyz
- pepeairdrop01.com
- 6zvjeulzaw5c0mv.xyz
- binancealliancesintro.com
- osec2.668ddf.cc
- so5083.tubeluck.com
- 7uspin.us
- bestcryptocurrency.top
- land.777bingos.xyz
- eg2bjo5x5r8yjb5.xyz
- appstoreconn.com
- xjslbdt9jdijn15.xyz
- tubeluck.com
- dd9l7e6ghme8pbk.xyz
- 65sse.668ddf.cc
- land.bingo777.now
- w2a315.tubeluck.com
- goanalytics.xyz
- cryptocurrencyworld.top