Threat Pulse 62High
Russia's APT29 watering-hole campaign delivers n-day exploit chains to iOS and Android users (Ukraine, US, Europe)
Severity 6ActivereportedConsumer devicesGovernment

Russia's APT29 watering-hole campaign delivers n-day exploit chains to iOS and Android users (Ukraine, US, Europe)

· 10 days ago · bleepingcomputer.com
On X
@TheHackersNewsverifiedNov 4, 14:31 UTC

🛑 Russia-linked APT29 is tied to a campaign delivering iOS and Android exploits through compromised sites and a hijacked web analytics script. DarkSword and AndroSnitch target browser cookies, Wi-Fi passwords, and sensitive device data. Details -

Open on X
@BleepinComputerverifiedNov 4, 09:40 UTC

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

Open on X
@TheRecord_MediaverifiedNov 5, 19:37 UTC

Russian state-linked hackers targeted users in Ukraine, the United States and Europe in a campaign designed to steal sensitive information from iPhones and Android devices, researchers found

Open on X
@SecurityWeekverifiedNov 5, 11:12 UTC

Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes

Open on X
@DFIR_RadarverifiedNov 6, 03:02 UTC

Russian 🇷🇺 APT29 ran a large-scale watering hole campaign against iOS and Android users, poisoning hacked sites and a Ukrainian 🇺🇦 analytics supply chain to deliver n-day mobile exploit chains. Key details: - Three delivery vectors, one payload pipeline. APT

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 11)

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.