Security Research: APT29 Suspected of Targeting Mobile Devices via Compromised Websites

TechFlow news, Nov. 5: According to a security report by Sekoia, researchers discovered a large-scale campaign targeting iOS and Android users, with attackers delivering exploit chains through compromised legitimate websites, spoofed sites, and tampered web analytics services.

Sekoia said it discovered the campaign in mid-October and attributed it to APT29 with moderate to high confidence. The payloads can steal browser cookies and, in some cases, obtain Wi-Fi passwords or device data.

Researchers said all discovered exploit chains targeted patched vulnerabilities and could not attack fully updated devices. Among them, the Plerdy analytics service script was tampered with between August 27 and September 3.

Source: TechFlow