Plerdy
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Threat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Activity reported by Sekoia.io BlogAPT29 uses compromised Plerdy analytics tracker to target unpatched iPhones and Android devices
- Activity reported by Cyber Security NewsRussian APT29 hackers use trusted websites to hack outdated iPhones and Android phones
Recent news
APT29 uses compromised Plerdy analytics tracker to target unpatched iPhones and Android devices
APT29 compromised Plerdy, a Ukrainian analytics tracker, and used it in a watering hole attack to serve n-day exploits to mobile users. The exploits target iPhones and Android devices that have not been patched. Sites that load the tracker could expose visitors to the attack.
Russian APT29 hackers use trusted websites to hack outdated iPhones and Android phones
Researchers at Sekoia attribute a campaign with moderate to high confidence to APT29, which used compromised sites, lookalike domains and a hacked Ukrainian SEO tracker to deliver device-specific exploits. The loaded script, UltimateFingerprinter, selects iOS 16.7, iOS 18.5 or Android Chrome targets, and the payloads steal cookies, saved logins, messages and other data without setting up lasting access. Fully patched iOS and Chrome versions are reported as safe, so the main defence is updating devices and replacing those no longer receiving updates.