Kaspersky has linked Coruna with Operation Triangulation. This somes a few weeks after we reported that L3Harris Trenchant was the company behind some components of Coruna.
And we also reported that it was possible Coruna was used in Operation Triangulation.
https://securelist.com/coruna-framework-updated-operation-triangulation-exploit/119228/
Lorenzo Franceschi-Bicchierai
npub1u7…xgwu9
2026-03-26 15:00:48 UTC
Author Public Key
npub1u76yrzs7y379urtp90prgsaj0a4wn9ru7fvcavrd8026ul0dj2ps8xgwu9Seen on
wss://relay.ditto.pubPublished at
2026-03-26 15:00:48 UTCEvent JSON
{
"id": "a8cd0adf074621825b0deb2b683f13c0ea250af8a306249cc1686cbd8e9b1d77",
"pubkey": "e7b4418a1e247c5e0d612bc23443b27f6ae9947cf2598eb06d3bd5ae7ded9283",
"created_at": 1774537248,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/lorenzofb/statuses/116296073113829587",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Kaspersky has linked Coruna with Operation Triangulation. This somes a few weeks after we reported that L3Harris Trenchant was the company behind some components of Coruna. \n\nAnd we also reported that it was possible Coruna was used in Operation Triangulation.\n\nhttps://securelist.com/coruna-framework-updated-operation-triangulation-exploit/119228/",
"sig": "4c062540b95c4920572b03358aa36422df19fac26b576ca4a3db124c399665ecb14c0a9de8792b046b519edd82f276e268b0ae1360b600f354f7a09f5ad08cb0"
}