An iPhone-hacking toolkit used by Russian spies likely came from U.S military contractor

Summary

The article investigates the origins of the 'Coruna' iPhone-hacking toolkit, suggesting it may have been developed by U.S. military contractor L3Harris and later used by Russian spies and Chinese cybercriminals. It explores how the toolkit could have been leaked and the potential connections to previous hacking campaigns.

Key Takeaways

1. An iPhone-hacking toolkit, Coruna, used in attacks against Ukrainian and Chinese iPhone users, may have originated from U.S. military contractor L3Harris.
2. Former L3Harris employees identified Coruna as an internal component of the company's hacking tools, though L3Harris did not comment.
3. The spread of Coruna from a potential U.S. government tool to Russian spies and Chinese cybercriminals highlights the risks of leaked or stolen hacking tools.

Statement Breakdown

• Claimed Facts: 60% of statements the article presents as facts
• Opinions: 25% of statements classified as editorial or subjective
• Claims: 15% of statements surfaced for additional reader evaluation

Credibility & Bias Reasoning

Credibility assessment: The article relies on named sources, including former employees and cybersecurity researchers, enhancing its credibility. However, some information is based on anonymous sources and claims without definitive proof, lowering the overall score. The author also presents conflicting information from different sources, allowing the reader to draw their own conclusions.

Bias assessment: Technological Accountability. The article focuses on the potential misuse of technology developed by a U.S. military contractor, highlighting the risks and unintended consequences of such tools. While presenting facts and different perspectives, the narrative leans towards scrutinizing the accountability of the involved parties. The author doesn't appear to have a political agenda.

Note: Some claims rely on anonymous sources and circumstantial evidence. Consider multiple perspectives before drawing conclusions.

Credibility flag: Investigative, Cautious

Claimed Facts (8)

• This is presented as a factual finding based on TechCrunch's investigation.
• This is a verifiable statement of Google's findings.
• This is a specific detail about the toolkit's composition and initial use.
• This is a factual account of Williams's actions.
• This is a verifiable fact about Williams's sentencing.
• This is a statement about Operation Zero's claimed affiliations.
• This is a technical detail about the toolkit's capabilities.
• This is a reference to a previously reported fact.

Opinions (6)

• This is a subjective assessment based on familiarity.
• This is a speculative statement about the toolkit's potential initial use.
• This is a value judgment expressed by the U.S. government.
• This is a speculative statement about the potential impact of the leaked tools.
• This is Cole's expert opinion based on available information.
• This is based on claims from unnamed sources.

Claims (7)

• The claim that the tools were 'intended for Western spies' is an assumption without direct evidence.
• This is a highly speculative chain of events with no concrete evidence.
• This is an accusation from a potentially biased source (Russian FSB) without independent verification.
• This is a claim about what Kaspersky *didn't* do, implying a hidden meaning.
• This is a subjective interpretation of a logo, suggesting a connection without proof.
• This is a speculative statement implying a deliberate connection without evidence.
• This is a claim about Kaspersky's past behavior, implying a hidden agenda.

Key Sources

• Lorenzo Franceschi-Bicchierai — Author
• L3Harris — Government contractor
• Google — Technology company
• iVerify — Mobile cybersecurity company
• Former L3Harris employee — Employee at Trenchant
• Peter Williams — Former general manager at Trenchant
• Operation Zero — Russian company
• U.S. Government — Government
• U.S. Prosecutors — Legal
• Rocky Cole — Co-founder of iVerify
• Kaspersky — Security company
• Russian FSB — Federal Security Service