Security researchers identified a sophisticated hacking campaign leveraging previously patched security flaws in iOS and Android operating systems. The attackers, assessed with moderate to high confidence as part of Russia’s Foreign Intelligence Service, employed multiple infection methods to compromise visitor devices across numerous websites.
The campaign utilized three primary distribution techniques: direct JavaScript injection into traffic from legitimate websites, reverse proxy domains mimicking authentic sites, and compromised supply-chain infrastructure including Ukrainian web analytics services. Initial JavaScript code profiled visitors’ devices and browsers before deploying customized zero-click exploit chains designed to work without user interaction.
Among targeted websites was america250.org, associated with a non-partisan bicentennial celebration group, alongside the Raffles London OWO luxury hotel near sensitive British government facilities including the Ministry of Defence. Researchers suggested the selection of high-profile targets reflected an effort to conduct spear-phishing campaigns against diplomatic delegations and government officials. Additional compromised sites included major Ukrainian infrastructure providers and energy companies, indicating a strategic focus on entities tied to geopolitical tensions in Eastern Europe.
The exploitation relied on outdated device versions that had not received security updates, despite patches being publicly available. One identified exploit chain, designated DarkSword, involved an iOS toolkit previously documented in use by commercial surveillance vendors and other threat actors. Researchers attributed the campaign to APT29, the designation used for suspected Russian state-sponsored hacking operations, based on victim profiling patterns and methodological similarities to previous attacks.
The campaign aimed to acquire sensitive data including browser credentials, wireless network passwords, and comprehensive mobile device information, with diplomatic targeting suggesting collection priorities focused on government communications and intelligence gathering.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI