Russian hackers target iOS and Android users with n-day exploits

Help Net SecurityNovember 4, 2026Vulnerabilities Endpoint Threat Intel

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia.

Summary from Help Net Security.

Read the full article at Help Net Security

Full story3 outlets are covering this story. Read the summary and every outlet's coverage

Explained

The technology and terms in this story. Learn more

ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.

Other sources covering the same vulnerabilities or event.

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Hacker News1h agoVulnerabilitiesEndpointThreat Intel

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

BleepingComputer6h agoVulnerabilitiesEndpointThreat Intel

Russian hackers target iOS and Android users with n-day exploits

Explained

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

More in Vulnerabilities

Attacks Are Accelerating

Zyxel security advisory (AV26-1114) – Update 1

[Control Systems] Phoenix Contact security advisory (AV26-1121)

HPE security advisory (AV26-1119)

SonicWall warns of unpatched flaws in end-of-life GMS software

Explained

Related coverage

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

More in Vulnerabilities

Attacks Are Accelerating

Zyxel security advisory (AV26-1114) – Update 1

[Control Systems] Phoenix Contact security advisory (AV26-1121)

HPE security advisory (AV26-1119)

SonicWall warns of unpatched flaws in end-of-life GMS software