Connect with us

Crypto World

Google Just Found iOS Exploit Kit Draining Crypto Wallets

Published

on

Google Just Found iOS Exploit Kit Draining Crypto Wallets

Google discovered a hacking toolkit called Coruna that silently breaks into iPhones and steals crypto by targeting popular wallet apps like MetaMask, Phantom, and Trust Wallet.

The attack requires no action from the victim, simply visiting a compromised or fake website on an unpatched iPhone is enough to trigger the infection.

Why it matters:

  • iPhones running iOS 17.2.1 or older remain vulnerable; Apple only patched the final exploits in iOS 17.3, released January 2024.
  • The toolkit scans notes and messages for crypto seed phrases and keywords like “backup phrase,” giving attackers full wallet access without needing a password.
  • 18 crypto apps are targeted, meaning users of MetaMask, Phantom, Exodus, Trust Wallet, and Uniswap face direct theft risk.

The details:

  • GTIG allegedly recovered the full toolkit from hundreds of fake financial and crypto exchange websites, including a spoofed WEEX crypto exchange.
  • A suspected Russian espionage group used the same toolkit in summer 2025 to target Ukrainian iPhone users through compromised local business websites.
  • A China-based financially motivated group later deployed it broadly via scam sites, allowing Google to retrieve the complete toolkit and name it Coruna.
  • Enabling Lockdown Mode in iPhone settings blocks the attack entirely — the toolkit detects it and stops running.

The big picture:

  • The same toolkit passed through a surveillance company, a state-backed Russian group, and Chinese financial criminals. This suggests a growing secondhand market for powerful hacking tools.
  • Two of Coruna’s exploits were previously used in Operation Triangulation, a 2023 iOS spying campaign uncovered by Kaspersky, showing how elite exploits get recycled across threat actors.

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Revolut Renews US Banking Push with Charter Application and New US CEO

Published

on

Revolut Renews US Banking Push with Charter Application and New US CEO

Fintech company Revolut has filed a new application for a US national bank charter as it renews its push into the North American market, marking the company’s second attempt to secure a US banking license.

The London-based company said Thursday that it submitted an application to the Office of the Comptroller of the Currency and the Federal Deposit Insurance Corporation to establish “Revolut Bank US, N.A.”

The company also appointed fintech veteran Cetin Duransoy as the company’s new US CEO. Duransoy brings more than two decades of experience in banking, payments and technology. He previously served as US CEO of fintech marketplace Raisin. Duransoy replaces Sid Jajodia, who will remain with the company as global chief banking officer.

“The United States is a key pillar of our global growth strategy,” Revolut founder and CEO Nik Storonsky said. “Filing for a national bank charter is a major milestone toward our vision of building the world’s first truly global banking platform,” he added.

Advertisement

Related: Stripe-Owned Bridge Gets OCC Conditional Approval for Bank Charter

US bank charter would unlock nationwide operations

If approved, the license would allow Revolut to operate under a single federal regulatory framework across all 50 US states. The charter would also give the company direct access to payment systems such as Fedwire and ACH, enable it to offer insured deposits through the FDIC and expand into products such as personal loans and credit cards.

Revolut previously attempted to secure a US banking license in 2021 through California regulators. That effort stalled and was eventually withdrawn in 2023 following regulatory hurdles and internal control concerns.