Russian Hackers Target iOS Android Devices
Tap title to read story
A large‑scale watering hole attack linked to Russian hackers has targeted iOS and Android users who visit compromised or look‑alike sites.
The campaign used high‑profile websites in the United States, Ukraine, the Czech Republic, and Bulgaria to deliver a JavaScript payload that profiles visitors’ devices and browser versions.
Researchers at Sekoia attribute the operation with moderate‑to‑high confidence to APT29, also known as Midnight Blizzard, a Russian threat group recently linked to hotel WiFi attacks.
The attackers exploited multiple CVEs, including CVE‑2025‑43529 and CVE‑2024‑27834 in iOS 16.7, to harvest Safari cookies, and CVE‑2026‑3910 in Chrome for Android to steal Chrome cookies, login data, and WiFi credentials.
The operation also compromised the Ukrainian web analytics service Plerdy, modifying its SEO tracker to serve the malicious payload to thousands of sites.
More context
Timeline
- 2026-11-04 — Russian Hackers Target iOS Android Devices
Why it matters
Immediate US impact: Users of iOS and Android devices may unknowingly download malicious code when visiting compromised sites. Possible long-term US impact: Persistent exploitation of zero‑click vulnerabilities could erode trust in mobile platforms. Most affected groups: Mobile users accessing compromised or look‑alike websites. Reader priority: Understand how attackers profile devices and deploy platform‑specific exploits.
Coverage notes
Center: Coverage from Mezha.net, Infosecurity Magazine, Fox News frames this as a developing news story: Russian Hackers Target iOS Android Devices. Reporting emphasizes verified facts, named sources, and near-term impact for readers. Left: Left-leaning desks covering the same development typically emphasize public impact, institutional accountability, and who is most affected. Right: Right-leaning desks covering the same development typically emphasize practical outcomes, market or security stakes, and institutional response.
Primary report
BleepingComputer — Russian Hackers Target iOS Android Devices
Sources
JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.
