Hackers Target iPhones and Android Phones: Here’s What We Know

https://assets.techrepublic.com/uploads/2026/11/unnamed-3-1.png?f=jpeg

Your phone could be compromised simply by visiting a legitimate website that hackers have secretly infected.

On Nov. 4, 2026, cybersecurity firm Sekoia disclosed a campaign that exploited previously patched vulnerabilities in iPhones and Android devices to steal passwords, browser cookies, messages, and other sensitive information via compromised websites.

The attacks could begin automatically when vulnerable devices loaded affected webpages, without additional clicks or downloads. For employees using smartphones to access work accounts, stolen credentials and browser sessions could also expose corporate information.

How hackers turned legitimate websites into traps

The campaign, dubbed Poisoned Source, was discovered by Sekoia researchers in mid-October 2026. The company published its findings...

Copyright of this story solely belongs to www.techrepublic.com. To see the full text click HERE