Russian APT29 group uses fake US and UK websites to target mobile visitors
THREAT ACTORAPT29redteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
APT29, also known as Cozy Bear and Midnight Blizzard, ran a watering hole campaign using compromised sites, cloned domains and a poisoned element to deliver mobile exploits to iOS and Android users. The fake sites imitated US and UK websites. The activity is assessed with moderate to high confidence as the work of the group, which is widely linked to Russia's SVR.
For IT people · Written by AI from 1 source · Wrong?
What to do
- No action needed.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Threat actors