Russian hackers use breached sites to steal iPhone and Android data

A cyberespionage campaign linked to Russia’s APT29 hacking group used compromised websites and a hijacked analytics script to target iPhone and Android users. Visiting an affected page was enough to trigger an attack on a vulnerable device, potentially exposing browser sessions, saved Wi-Fi passwords, and private messages. Sekoia’s researchers uncovered the campaign in mid-October 2026 … The post Russian hackers use…

Mobile Development
Read the full article at CyberInsider Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Help Net Security

Russian hackers target iOS and Android users with n-day exploits

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering holes target mobile devices with n-day exploits (Source: Sekoia) The company’s Threat Detection & Research (TDR) team spotted the operation in mid-October 202…

The Hacker News

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and