Hackers use n-day exploits in zero-click attacks on iOS, Android devices

Hackers exploited iOS and Android flaws to infect phones

Hackers possibly linked to the Kremlin exploited previously patched iOS and Android flaws in an attempt to hack visitors of multiple websites, including one celebrating the 250th anniversary of the signing of the US Constitution, researchers said Wednesday. The attackers, which the researchers assessed with “moderate to high confidence” were part of Russia’s Foreign Intelligence Service, targeted other sites, many with links to that country’s on…

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals.

Hackers Exploit iOS and Android Vulnerabilities to Infect Mobile Devices

Researchers said Wednesday that hackers linked to the Kremlin may have exploited previously patched flaws in iOS and Android to compromise visitors to several websites, including one associated with the 250th anniversary of U.S. independence. The attackers, assessed with “moderate to high confidence” to be part of Russia’s foreign intelligence service, targeted sites connected largely [...]

Russian hackers target iOS and Android users with n-day exploits

Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and steal their cookies, messages and Wi-Fi passwords, according to Sekoia. APT29 watering holes target mobile devices with n-day exploits (Source: Sekoia) The company’s Threat Detection & Research (TDR) team spotted the operation in mid-October 2026. “This watering hole campai…

Russian APT29 Hackers Turn Trusted Websites Into Traps to Compromise iPhone and Android Users

A Russian state-linked hacking group is using trusted websites to quietly break into phones. Researchers say APT29, also known as Midnight Blizzard or Cozy Bear, planted hidden code on real and cloned sites in the US, Ukraine, the Czech Republic and Bulgaria. Visitors with out-of-date iPhones or Android phones can lose cookies, Wi-Fi passwords and, […]