Security · High impactFan score 69 · Tier A3 sources
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign
The Record from Recorded Future News ·
Russian state-linked hackers targeted users in Ukraine, the United States and Europe in a campaign to steal sensitive information from iPhone and Android devices, researchers found.
The Brief
- Russia-linked APT29 is presumed behind a watering-hole campaign targeting iOS and Android users.
- Compromised websites, fake domains and a hijacked script from Ukrainian analytics service Plerdy SEO Tracker deliver exploit chains.
- Targets are reported in Ukraine, the United States and Europe, with the aim of stealing sensitive information.
Why it matters
Developers whose sites load third-party analytics scripts can unknowingly serve exploits to visitors, and mobile users of affected sites can be compromised without any interaction.
Who’s affected
- Website owners embedding Plerdy SEO Tracker
- iOS and Android users visiting compromised sites
- #security
- #watering-hole
- #supply-chain
- #ios
- #android
- #apt29
Timeline
Campaign reported by The Hacker News
The Hacker News
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
SecurityWeek
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
The Record from Recorded Future News
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign
