A global hacking campaign targeting iPhone users in Ukraine and China used tools likely designed by U.S. military contractor L3Harris, according to TechCrunch. The tools, intended for Western spies, were used by various hacking groups, including Russian government spooks and Chinese cybercriminals. The toolkit, named Coruna by its original developer, was initially used in highly targeted operations by an unnamed government customer of an unspecified "surveillance vendor before being used by Russian government spies against Ukrainians and then by Chinese cyber criminals. Mobile cybersecurity company iVerify believes Coruna may have been originally built by a company that sold it to the US. Former employees of government contractor L2Harris confirmed that Coruna was developed by the company's hacking and surveillance tech division, Trenchant. The incident may not be explained by how Coruna went from a Five Eyes government contractor to a Russian government hacking group, but similar circumstances appear similar to that of former general manager Peter Williams, who admitted stealing and selling eight company hacking tools to Operation Zero.