APT29 ran zero-click smartphone espionage campaign against Ukraine, US and Europe
Sekoia says the SVR-linked group watered legitimate and spoofed websites and compromised Plerdy analytics to steal messages, passwords and photos from iPhones and Androids.