Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones

Criminal groups are using malicious Instagram advertisements, expired analytics domains and compromised websites to deliver the Coruna and DarkSword iOS exploit kits to vulnerable iPhones, according to research covered by GBHackers. In these ‘half-click’ attacks exploitation can begin automatically when malicious content loads, and observed variants targeted keychain passwords, account information and cryptocurrency wallet apps; researchers linked the parallel DeadTag operation to hundreds of abused domains embedded in websites that collectively receive about 135 million visits a month.