Coruna, DarkSword & Democratizing Nation-State Exploit Kits

Summary

Nation-state-grade malware and exploit kits, including Coruna and DarkSword, are being sold on the dark web and leaked to public repositories like GitHub. This democratization of advanced persistent threat (APT) tools significantly lowers the barrier to entry for cybercriminals and non-state actors, exposing organizations of all sizes to attack techniques previously reserved for high-level targets.

Indicators of Compromise

• malware — Coruna
• malware — DarkSword