Midnight Blizzard uses exploit chains in watering holes
Original title: Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
Russia-linked APT29 deploys zero-click exploits via watering holes against iOS Android users in Europe and US targeting high-profile sites.
Midnight Blizzard compromised high-profile websites of Ukrainian gas firms trade associations and Bulgarian military sites to deliver exploit chains. Three chains reuse n-day vulnerabilities including DarkSword for iOS and Chrome bugs for Android. Payloads harvest device data messages emails credentials and iCloud content. Attacks aimed at diplomatic and government targets in US Ukraine Czech Republic and Bulgaria.
- Targets include Ukrainian gas and military sites
- Reuses DarkSword exploit kit
- CVE-2024-27834 bypasses iOS PAC
- AndroSnitch steals Chrome data
- Harvests messages emails credentials photos
Impact: device data theft and account compromise
- 1.Patch n-day vulnerabilities
- Products
- iOS SafariChromeAndroid
- Threat actors
- Midnight BlizzardAPT29
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-27834 | Improper Authentication in Apple Products Bypassing Pointer Authentication | 5.5 | 2% | KEV | KEV |
| CVE-2025-27038 | Use-After-Free in Qualcomm Adreno GPU Drivers Affects Multiple Chipsets | 7.5 | 1% | KEV | KEV |
| CVE-2026-3910 | Out-of-Bounds Memory Flaw in Google Chrome V8 Allows Sandboxed Code Execution | 8.8 | 3% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | america250.org | high-profile sites, injecting malicious code into copies of america250.org, the site of the 250th anniversary of American independence |
From the original article
3 min read at securityweek.com
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine. The post Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.