TI Mindmap HUB
Threat Intelligence Report

DarkSword/Coruna Open Directory Finding Report

📅 October 18, 2026 📰 censys.com 🔍 3 CVE(s) referenced

Open directories exposed an active Chinese exploitation-as-a-service operation using DarkSword/Coruna to compromise iPhones and steal cryptocurrency recovery phrases at scale, while developing—but not yet deploying—a new iOS 26 exploit chain.

unclassified
CVE-2025-31200, CVE-2025-24201, CVE-2026-31001

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle