APT29 hijacks Plerdy SEO Tracker script in watering hole attack on iOS and Android users
THREAT ACTORAPT29redteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
APT29 is reportedly behind a large-scale watering hole campaign targeting iOS and Android users via compromised websites, fake domains and a supply chain compromise of the Ukrainian web analytics service Plerdy SEO Tracker. The injected JavaScript harvests browser and device attributes, and the campaign is said to deliver iOS and Android exploits. The article is truncated and gives no CVE IDs, affected versions or indicators, so defenders should check their own use of Plerdy scripts and review web analytics includes against vendor reporting once it is available.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Threat actors