Russia's APT29 targets iOS and Android users through compromised websites
THREAT ACTORAPT29redteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Sekoia reports that APT29 is running a watering hole campaign against iOS and Android users using compromised websites, lookalike domains and a hijacked web analytics service. The attackers use n-day exploits for flaws that have already been patched, and aim to steal cookies, messages and Wi-Fi passwords. Sekoia's Threat Detection & Research team spotted the operation in mid-October 2026.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Update iOS and Android devices to the latest available software to close patched flaws.
- Be cautious of unexpected websites or lookalike web addresses, especially those reached through links.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security
Who and what is in it
Threat actors
Companies