Hackers exploited iOS and Android flaws to infect phones
ars ·
Researchers have identified a cyberattack campaign where hackers exploited patched vulnerabilities in iOS and Android devices to infect phones. The intrusion set, assessed with moderate to high confidence as being linked to Russia’s Foreign Intelligence Service, targeted visitors of specific websites. Attackers impersonated legitimate sites, such as america250.org and the Raffles London hotel, using reverse proxies to inject malicious JavaScript into traffic. This code profiled users' devices before delivering zero-click exploit chains tailored to their operating systems. One known vector involved the DarkSword iOS exploit kit, while others remained unnamed. The campaign relied on 'n-day' flaws, meaning it only affected devices running outdated software versions that had already received security patches. Targets included diplomatic entities and organizations associated with Ukraine, suggesting a focus on espionage against government officials.
ars