Older iphones & ipads urgently need security updates amidst 'coruna' exploit

Apple has released emergency security updates for older iPhone and iPad models, urging users to install them immediately. The updates, iOS 15.8.7 and iOS 16.7.15, address vulnerabilities exploited by a sophisticated threat actor known as “Coruna.”

Coruna exploit targets millions of devices

The updates are designed for devices no longer eligible for newer iOS versions. Affected iPhones include the iPhone SE, iPhone 7, and iPhone 6S, while the update for iPads covers the 5th generation iPad, the first generation iPad Pro 9.7-inch, and the first generation iPad Pro 12.9-inch. The updates are critical because a newly discovered exploit kit, Coruna, targets iOS versions ranging from iOS 13 to iOS 17.2.1.

Developed by the Google Threat Intelligence Group (GTIG), Coruna is designed to steal financial credentials. The exploit kit identifies the device and iOS version, then leverages customized tools to breach security. Its capabilities are particularly alarming: it can decode QR codes and scan photos, utilizing Optical Character Recognition (OCR) to extract sensitive information like passwords stored in images.

The attack progresses from “seeker mode,” gathering information, to “thief mode,” attempting to access online banking accounts. If a specific banking app is detected, Coruna downloads a module tailored to that app. The implications are significant – attackers could potentially obtain usernames, security question answers, and even access your online banking.

Lockdown mode offers a temporary shield

Interestingly, Coruna is rendered ineffective when iPhones are enabled with Lockdown Mode. This security feature severely restricts device functionality, acting as a panic button in the face of a cyberattack. Users can activate it in Settings> Privacy & Security> Lockdown Mode. While a drastic measure, it provides a critical defense.

The urgency of these updates underscores the persistent threat to older devices. The fact that Apple is releasing these patches for models no longer receiving feature updates highlights the ongoing battle against cybercriminals. This isn't just about convenience; it's about safeguarding personal financial data. The potential for financial loss and identity theft is very real.

The Coruna exploit demonstrates that security isn't a one-time fix. It’s an ongoing process that requires vigilance and prompt updates. Ignoring these updates leaves users vulnerable to a potentially devastating attack. The immediacy of this threat demands immediate action.