> TritonInfoSec News
Home / Nov 05, 2026 / Story
0
#3 The Hacker News general November 04, 2026 at 14:27 UTC

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

By [email protected] (The Hacker News)

AI Summary

APT29 (Cozy Bear) conducted a large-scale watering hole campaign targeting iOS and Android users by compromising legitimate websites, registering fake domains, and hijacking the Plerdy SEO Tracker supply chain — a Ukrainian web analytics service. Injected JavaScript collected browser and device fingerprints to serve n-day exploits for CVE-tracked iOS and Android vulnerabilities against likely diplomatic targets. Sekoia researchers Amaury-Jacques Garçon attributed the campaign to Russia's SVR-linked group.

Read full article → https://thehackernews.com/2026/11/apt29-linked-hac…

Relevance score: 85.0/100

# More from November 05

  1. 1
    Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft The Hacker News
  2. 2
    French blood service hit by Europe-wide cyberattacks on refrigeration The Record
  3. 4
    Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory The Hacker News
  4. 5
    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades The Hacker News
  5. 6
    cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes The Hacker News
  6. 7
    Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction The Hacker News
  7. 8
    Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges The Hacker News
  8. 9
    Zyxel fixes zero-day exploited to hack nearly 1,000 network switches BleepingComputer
  9. 10
    More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus The Record