Security · High impactFan score 69 · Tier A3 sources
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
SecurityWeek · By Ionut Arghire ·
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine. The post Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes appeared first on SecurityWeek .
The Brief
- Russia-linked APT29 is presumed behind a watering-hole campaign targeting iOS and Android users.
- Compromised websites, fake domains and a hijacked script from Ukrainian analytics service Plerdy SEO Tracker deliver exploit chains.
- Targets are reported in Ukraine, the United States and Europe, with the aim of stealing sensitive information.
Why it matters
Developers whose sites load third-party analytics scripts can unknowingly serve exploits to visitors, and mobile users of affected sites can be compromised without any interaction.
Who’s affected
- Website owners embedding Plerdy SEO Tracker
- iOS and Android users visiting compromised sites
- #security
- #watering-hole
- #supply-chain
- #ios
- #android
- #apt29
Timeline
Campaign reported by The Hacker News
The Hacker News
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
SecurityWeek
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
The Record from Recorded Future News
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign
Full coverage · 3 sources
- 19h ago ↗
The Record from Recorded Future News
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign - 1d ago ↗
SecurityWeek
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
- 2d ago ↗
