The Morning Dev

Only the news worth knowing

‹
 
  • AAPL 344.17 ▼ 1.53%
  • MSFT 535.93 ▼ 3.58%
  • NVDA 181.60 ▼ 9.26%
  • GOOGL 282.57 ▼ 2.20%
  • AMZN 260.21 ▼ 2.19%
  • META 605.08 ▼ 3.96%
  • TSLA 343.69 ▼ 10.77%
  • AVGO 291.53 ▼ 10.43%
  • TSM 353.10 ▼ 10.78%
  • ORCL 115.16 ▼ 6.93%
  • AMD 404.40 ▼ 17.26%
  • NFLX 65.56 ▼ 1.25%
  • CRM 222.41 ▼ 2.07%
  • ADBE 246.44 ▼ 0.82%
  • INTC 52.25 ▼ 10.33%
  • IBM 247.11 ▼ 2.84%
  • PLTR 154.99 ▼ 9.73%
  • SNOW 269.54 ▼ 7.25%
  • NET 244.51 ▼ 8.28%
  • SAP 243.53 ▲ 1.45%

Security · High impactFan score 69 · Tier A3 sources

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Hacker News · By info@thehackernews.com (The Hacker News) ·

The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker…

Read the full story at thehackernews.com ↗

The Brief

  • Russia-linked APT29 is presumed behind a watering-hole campaign targeting iOS and Android users.
  • Compromised websites, fake domains and a hijacked script from Ukrainian analytics service Plerdy SEO Tracker deliver exploit chains.
  • Targets are reported in Ukraine, the United States and Europe, with the aim of stealing sensitive information.

Why it matters

Developers whose sites load third-party analytics scripts can unknowingly serve exploits to visitors, and mobile users of affected sites can be compromised without any interaction.

Who’s affected

  • Website owners embedding Plerdy SEO Tracker
  • iOS and Android users visiting compromised sites
  • #security
  • #watering-hole
  • #supply-chain
  • #ios
  • #android
  • #apt29

Timeline

  1. Campaign reported by The Hacker News

  2. The Hacker News

    APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

  3. SecurityWeek

    Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes

  4. The Record from Recorded Future News

    Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign

Full coverage · 3 sources

How do you feel about this?

0 Comments

    More in Security

    Security · High impact

    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

    A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4…

    The Hacker News · info@thehackernews.com (The Hacker News) · · 2 sources · 💬 78

    Security · High impact

    Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

    Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]

    BleepingComputer · Lawrence Abrams · · 3 sources

    Security · High impact

    More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus

    Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing…

    The Record from Recorded Future News · · 2 sources