Covered by 3 outlets — first reported by BleepingComputer, Nov 4, 09:39 UTC
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
Summary
Security firm Sekoia says the Russia-linked group APT29 is running a large watering hole campaign (booby-trapped websites that attack visitors) against iPhone and Android users. The attackers use compromised sites, lookalike domains and a hijacked Ukrainian web analytics script, Plerdy SEO Tracker, to deliver exploits for already-patched flaws. Sekoia's researchers spotted the operation in mid-October 2026 and say it steals cookies, messages and Wi-Fi passwords.
AI summary by the SecurityTabs newsroom, checked against The Hacker News, Help Net Security, BleepingComputer. Read the outlets below for the full story.
Continue reading
3 outlets, in the order they reported it.
BleepingComputerFirst report
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals.
The Hacker News
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web…
Help Net Security
Russian hackers target iOS and Android users with n-day exploits
Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to…
Explained
The technology and terms in this story. Learn more