Attend our LABSCon Presentation: Core Meltdown: Inside Coruna and DarkSword

Coruna and DarkSword didn't need a target list. Deployed through watering hole attacks and triggered by a simple iframe, they compromised iOS 13 through 18.7 indiscriminately, no spearphishing required.

iVerify's threat research team has been inside both frameworks. In this session, Kevin Hoganson and Mateusz Krzywicki walk through how each spyware agent navigates a compromised device, what the forensic evidence of a live infection actually looks like, and how these behaviors point to a shared threat actor running both frameworks together to maximize coverage.

Speakers

Kevin Hoganson — Senior Threat Hunter, iVerify Threat intelligence, digital forensics, and incident response, with a background spanning government and defense industry offensive operations.

Mateusz Krzywicki — VP of Threat Research, iVerify 15+ years in vulnerability research and exploit development, with senior security roles at Apple, Amazon, Microsoft, and ESET.