Russian-linked hackers use watering hole sites in zero-click attacks on iOS and Android

A large-scale watering hole campaign, associated with Russian threat actors, targets iOS and Android users via compromised legitimate sites and fake portals that impersonate them. The attacks are zero-click and reportedly use n-day exploits. The article does not name specific CVEs, affected OS versions or patches, so defenders should check vendor advisories for the relevant n-day issues and confirm their mobile fleet is fully patched.

For security analysts · Written by AI from 1 source · Wrong?