APT29 watering holes target patched iPhones and Android
Original title: APT29 Watering Holes Target Unpatched iPhones and Android Devices
Attackers served exploit chains for already-patched iOS and Android flaws via legitimate websites and lookalikes.
Sekoia uncovered a campaign by APT29 that used scripts on legitimate sites, lookalike domains, and a compromised analytics tracker to deliver exploits. The payloads steal cookies and device data without user interaction. All exploits were previously patched. The campaign targeted various sites in multiple countries.
Unconfirmed: Sekoia assessed moderate to high confidence that it is APT29
- Exploits targeted iOS 16.7, iOS 18.5, and Android Chrome
- No persistence established
- Campaign used three delivery routes
- Sites included Ukrainian and US targets
Impact: unauthorized access to device data and credentials
- 1.keep devices updated
- 2.avoid visiting untrusted sites
- Threat actors
- APT29
From the original article
2 min read at infosecurity-magazine.com
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.