Russian APT29 targets mobile users with watering-hole attacks

Sekoia linked a campaign to APT29 that targeted iOS and Android users through hijacked or fake websites and a compromised Plerdy web analytics service. The campaign used exploit chains targeting known vulnerabilities in mobile devices.