APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and

Summary from The Hacker News.

Explained

The technology and terms in this story. Learn more

Related coverage

Other sources covering the same vulnerabilities or event.

More in Vulnerabilities

Attacks Are Accelerating

VideoJohn Hammondjust nowVulnerabilitiesThreat Intel

Zyxel security advisory (AV26-1114) – Update 1

Canadian Centre for Cyber Securityjust nowVulnerabilitiesNetworkCVE-2026-107441

[Control Systems] Phoenix Contact security advisory (AV26-1121)

Canadian Centre for Cyber Securityjust nowVulnerabilities

HPE security advisory (AV26-1119)

Canadian Centre for Cyber Security1h agoVulnerabilities

SonicWall warns of unpatched flaws in end-of-life GMS software

BleepingComputer1h agoVulnerabilities