#DarkSword

APT29 deploys mobile exploit kits via hijacked analytics and watering holes

APT29-linked actors are using hacked websites, lookalike proxy domains and a hijacked analytics script to push mobile exploit chains to iOS and Android users. The zero-click browser exploits steal cookies, passwords and, on iOS 18.5, full device data. Every flaw in the chains is already patched, so update iOS, Android and Chrome now.