Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
PropellerAds: Why Modern Malware Delivery Starts Before the Payload
By Farukh Rakhimov, Head of Compliance, Data Protection, and Information Security at AdTech Holding In March 2026, Google Threat Intelligence Group (GTIG) disclosed Coruna, an iOS exploit kit with five exploit chains and 23 exploits covering iOS 13.0 through 17.2.1. The most instructive part of the disclosure is what happened before the exploit got any […] The post PropellerAds: Why Modern Malware Delivery Starts Before the Payload appeared first on Cyber Security News.
In March 2026, Google Threat Intelligence Group (GTIG) disclosed Coruna, an iOS exploit kit with five exploit chains and 23 exploits covering iOS 13.0 through 17.2.1. The most instructive part of the disclosure is what happened before the exploit got any chance to run. Coruna was amazingly picky about visitors. A JavaScript fingerprinting module checked whether the visitor was a real device, which iPhone model it was and which iOS version it ran. Only then did the framework fire a matching exploit. Researchers, scanners, Lockdown Mode devices and private browsing sessions were shown the door. For a defender, the payload is where the investigation starts. For the operator, it is the end of the assembly line: by then, traffic has already been acquired, routed and…
Excerpt shown under the publisher's RSS terms · 125 words · full text and figures are on the publisher's site
