Google's Threat Intelligence Group (GTIG) has discovered a powerful iPhone hacking toolkit, Coruna, that can infect devices when a user visits a malicious website without the need for action. The toolkit includes five full iOS exploit chains and 23 vulnerabilities targeting iPhones running iOS 13 through 17.1. Researchers first identified parts of the toolkit in 2025 in an exploit chain used by an unnamed commercial surveillance vendor. The same framework later appeared on compromised Ukrainian websites, and later on Chinese websites tied to cryptocurrency and finance scams. The vulnerabilities have since been patched in newer versions of Apple's mobile operating system and GTIG has urged users to update their devices.