Russian-linked hackers exploit routine iOS and Android browsing
BleepingComputer reports a large-scale Russian-linked watering-hole campaign using eight known flaws to target iOS and Android users who visit compromised websites or lookalike portals.
The attackers use n-day exploits—flaws already disclosed publicly. A site serves a page that triggers a browser or device flaw, so simply visiting can start an attack; users need not open an attachment, install an app, or tap a download.
For organizations whose users visit these portals, exposure can follow the person rather than a company-managed phone. The report does not identify affected software versions or establish what attackers can do after the initial exploit, leaving both fleet exposure and downstream impact unclear.
CVEs in this update
8 CVEs
Across Chrome, safari, ipados, and related packages.
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals.