Skip to content
securitytabs

Covered by 2 outlets — first reported by Infosecurity Magazine, Nov 4, 14:00 UTC

APT29 Watering Holes Target Unpatched iPhones and Android Devices

MentionsAndroidAPT29GoogleAppleiOS

Summary

Russia-linked group APT29 is running a large watering hole campaign (booby-trapped websites that infect visitors) against iPhone and Android users. Sekoia links the operation to APT29, also known as Cozy Bear and Midnight Blizzard, and says the attackers hijacked a Ukrainian web analytics service called Plerdy to serve exploits for flaws that vendors have already patched. Devices that have not been updated are the ones exposed.

AI summary by the SecurityTabs newsroom, checked against Infosecurity Magazine, Security Affairs. Read the outlets below for the full story.

Continue reading

2 outlets, in the order they reported it.

  1. Infosecurity MagazineFirst report

    APT29 Watering Holes Target Unpatched iPhones and Android Devices

    APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users

    Read at Infosecurity Magazine Details

  2. Security Affairs

    Russian APT29 Targets Mobile Users with Watering Hole Attacks

    Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign is going after iOS and Android users, and it links the campaign to…

    Read at Security Affairs Details

Explained

The technology and terms in this story. Learn more