UNC6353

No known aliases in database

⚠ Critical Threat

DarkSword iOS Exploitation, Coruna Exploitation Campaign

Origin Russia

Sponsor Russian government (suspected)

Motivation Espionage

Target Sectors

Ukrainian civilians Ukrainian mobile users iOS users

Watering hole attacks

iOS full-chain exploitation

Zero-day exploitation

JavaScript-based exploitation

Deployment of GHOSTBLADE malware

CISA Advisories ↗

Hacking the mainframe…