APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
// AI summary
APT29-linked hackers hijacked the Plerdy SEO Tracker web analytics script in a watering hole campaign to deliver iOS and Android exploits, collecting browser and device attributes from users.
// from the source
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and