Older iphones and ipads face urgent security patch amid new malware threat
Apple released emergency security updates for several older iPhone and iPad models today, urging users to install them immediately. The updates, iOS 15.8.7 and iPadOS 15.8.7, address vulnerabilities exploited by a newly discovered exploit kit dubbed "Coruna." This isn't just a routine software update; it’s a direct response to a sophisticated attack targeting millions of devices.
Coruna exploit kit targets iphone and ipad users
The Coruna exploit kit, developed by the Google Threat Intelligence Group (GTIG), targets iOS versions ranging from iOS 13 to iOS 17.2.1. This means a vast number of devices are potentially vulnerable. The kit leverages sophisticated techniques to infiltrate devices, steal credentials, and even extract sensitive data like QR codes and photo-stored passwords.
The threat is particularly insidious. Once a device is compromised—often through visiting a malicious website disguised as a cryptocurrency or gambling site—Coruna identifies the iPhone model and iOS version. Then it tailors its attack, even targeting specific banking apps. The payload’s ability to decode QR codes and analyze images using OCR makes it a potent weapon for attackers.
The implications are significant. Hackers can potentially access online banking accounts, using stolen usernames and answers to security questions. And if a user has a specific banking app installed, the exploit kit can download a customized module to specifically target it. The attackers essentially gain a digital key to your finances.
Fortunately, Apple has responded swiftly. The update patches known vulnerabilities, preventing attackers from exploiting these weaknesses. The update is available for iPhone SE, iPhone 7, and iPhone 6S running iOS 15.8.7 and for iPad Air 2 and iPad mini 4 running iPadOS 15.8.7. These devices can no longer be updated to newer versions of iOS or iPadOS.
Apple has also introduced Lockdown Mode as a defensive measure. This feature severely restricts device functionality, essentially putting the iPhone into a protective shell. Lockdown Mode should only be engaged when a device is actively under cyberattack. It’s a last resort, but a powerful one.
The speed with which Apple released these updates underscores the seriousness of the threat. The fact that Coruna can decode QR codes and extract information from photos highlights the evolving sophistication of cyberattacks. The warning is clear: update your older devices now, before they become easy targets. The potential consequences—financial loss and identity theft—are very real.