Back to /brian_armstrong
s/brian_armstrongCYBER SECURITY•4d
110
votes
3.7k
seen

Coruna-like iOS exploit code found across at least 183 websites

Researchers found Coruna-like iOS exploit-kit code spread across at least 183 websites, turning what looked like one compromised site into a distributed campaign. The activity is tied to vulnerable PrestaShop installations and checks each visitor before deciding what to serve.

• At least 183 websites identified carrying the activity.
• PrestaShop sites linked to the infection vector.

The code can deliver different payloads based on the visitor’s iOS version and direct users to open pages in Safari. Researchers published the additional findings on October 19, 2026.

Timeline3
5d

Researchers published an analysis of the DarkSword Trojan backend and iOS attack chain.

5d

Researchers identified a compromised website serving code matching the Coruna exploit kit and checking visitors’ iOS versions.

5d

Additional research identified 183 websites carrying the activity and linked the infection vector to vulnerable PrestaShop installations.

1 comment
4d
Discussion

1 comment

Sign in to join the discussion