iPhone And Android Phones Targeted In No-Click Website Attacks
It's been a while since we at HotHardware covered a major cyber-attack from Russian state-sponsored cybercriminal group APT29 (aka Cozy Bear, etc), but today they're once more in the news for a spooky no-click malware campaign that targets both Android and iPhone users. Some places the campaign has been seen suggest it's explicitly being targeted at government officials or infrastructure within Ukraine or the United States (which would make sense for Russia to target), but evidence of the campaign popping up as far afield as an Australian medical clinic suggests a wider footprint.
So, how does the attack work? In short, numerous different Android and iOS browser exploits are being used to inject malicious loaders onto legitimate websites. Specifically, iOS versions 16.7 and 18.5 are being targeted, as well as Chrome for Android versions 139-145 with the exception of version 143. Cybersecurity company Sekoia, who revealed the extent of this...
Copyright of this story solely belongs to hothardware.com. To see the full text click HERE