Russian APT29 hackers use trusted websites to hack outdated iPhones and Android phones
THREAT ACTORAPT29redteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
A Russian state-linked hacking group hid malicious code on real and copycat websites, so anyone visiting with an out-of-date phone could have data stolen just by opening a page. The stolen information can include saved passwords, cookies, Wi-Fi settings and, in some cases, much of the phone's data. Fully updated phones are not affected, as the attacks use old flaws that have already been fixed.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Update iOS and Chrome on iPhones and Android phones to the latest versions.
- Replace phones that no longer receive security updates.
- Check logs for the listed malicious domains and IP addresses.
- Review which third-party scripts your websites load.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Threat actors
Malware