APT29 uses compromised Plerdy analytics tracker to target unpatched iPhones and Android devices
THREAT ACTORAPT29redteam/daily · 2 sources
- Severity
- High
- Sources
- 2
What happened
APT29 compromised the Ukrainian analytics tracker Plerdy and used it as a watering hole to serve n-day exploits to mobile users. The targets are unpatched iPhones and Android devices. The article gives no CVE IDs or affected OS versions. Defenders should prioritise mobile OS patching and review where Plerdy scripts are loaded.
For security analysts · Written by AI from 2 sources · Wrong?
What to do
- Update iPhones and Android devices to the latest operating system version.
- Check whether any websites you manage load the Plerdy tracker.
Written by AI from the sources, checked against them
Full story timeline · 2 updates
Who reported · 2 outlets
Sekoia.io BlogInfosecurity Magazine
Who and what is in it
Threat actors
Products