Security
Russia-linked APT29 hit old iPhones and Android phones through hacked websites and a poisoned analytics script
Sekoia says APT29 used compromised sites, lookalike domains and a hijacked Plerdy analytics script to push zero-click exploit chains at visitors on outdated iOS and Android. Every bug was already patched, so up-to-date phones were safe. CISA has now added one of the iOS flaws to its exploited list.