IoCs (Indicators of Compromise) for the Coruna iOS iPhone Web Malware Client Side Exploits Serving Web Malware Exploitation Kit
Essential information
- Published
- 16/03/2026 23:26
- Modified
- 17/03/2026 01:44
- Tags
- 2026-03-16 client-side exploits coruna coruna ios iphone web malware exploitation kit indicators of compromise ios iphone web malware
- Related entities
- 160 observables, 7 techniques (mitre), 1 malware, 70 others
Description
The intelligence details indicators of compromise for the Coruna iOS iPhone web malware exploitation kit. It provides MD5, SHA-1, and SHA-256 hashes for detected JavaScript payloads. The analysis lists numerous active domains serving the malware, including specific URLs delivering client-side exploits. The campaign involves a wide network of malicious domains and URLs targeting iOS devices. The extensive list of compromised and malicious infrastructure demonstrates the scale of this exploitation kit's operations, highlighting the ongoing threat to iPhone users through web-based attacks.