Hackers allegedly linked to Russia's Foreign Intelligence Service exploited previously patched iOS and Android vulnerabilities to compromise phones via malicious websites. The campaign used reverse proxy sites, including a counterfeit america250.org page targeting visitors to US independence celebrations, to inject JavaScript that stole cookies, Wi-Fi passwords, and device data.
Background
Nation-state APT groups frequently use patched vulnerabilities in zero-day or near-zero-day campaigns against mobile targets, particularly those with geopolitical relevance.
- Source
- Ars Technica
- Published
- Nov 5, 2026 at 06:26 AM
- Score
- 7.0 / 10