CYBERSECURITYTRACKER
Permanent story citation

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12314

As cited

Copy frozen at (site build).

threat intel

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

Russian-linked hackers are conducting a large-scale watering hole attack targeting iOS and Android users through compromised websites and fake portals mimicking legitimate services. The campaign exploits n-day vulnerabilities in zero-click attack chains to compromise mobile devices without user interaction.

Why it matters: iOS and Android users face compromise when visiting legitimate or spoofed websites, making this attack vector relevant to anyone managing mobile security and to organizations whose users access web services on mobile devices.

VendorsAppleGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

Russian-linked hackers are conducting a large-scale watering hole attack targeting iOS and Android users through compromised websites and fake portals mimicking legitimate services. The campaign exploits n-day vulnerabilities in zero-click attack chains to compromise mobile devices without user interaction.

Why it matters: iOS and Android users face compromise when visiting legitimate or spoofed websites, making this attack vector relevant to anyone managing mobile security and to organizations whose users access web services on mobile devices.

VendorsAppleGoogle
Actorsapt29
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

Russian-linked hackers are conducting a large-scale watering hole attack targeting iOS and Android users through compromised websites and fake portals mimicking legitimate services. The campaign exploits n-day vulnerabilities in zero-click attack chains to compromise mobile devices without user interaction.

Why it matters: iOS and Android users face compromise when visiting legitimate or spoofed websites, making this attack vector relevant to anyone managing mobile security and to organizations whose users access web services on mobile devices.

VendorsAppleGoogle
Actorsapt29
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

Russian-linked hackers are conducting a large-scale watering hole attack targeting iOS and Android users through compromised websites and fake portals mimicking legitimate services. The campaign exploits n-day vulnerabilities in zero-click attack chains to compromise mobile devices without user interaction.

Why it matters: iOS and Android users face compromise when visiting legitimate or spoofed websites, making this attack vector relevant to anyone managing mobile security and to organizations whose users access web services on mobile devices.

VendorsAppleGoogle
Actorsapt29
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Hackers use n-day exploits in zero-click attacks on iOS, Android devices

Russian-linked hackers are conducting a large-scale watering hole attack targeting iOS and Android users through compromised websites and fake portals mimicking legitimate services. The campaign exploits n-day vulnerabilities in zero-click attack chains to compromise mobile devices without user interaction.

Why it matters: iOS and Android users face compromise when visiting legitimate or spoofed websites, making this attack vector relevant to anyone managing mobile security and to organizations whose users access web services on mobile devices.

VendorsAppleGoogle
Actorsapt29
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary