Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets.
The short version
- Hackers possibly linked to the Kremlin exploited previously patched iOS and Android flaws in an attempt to hack visitors of multiple websites, including one celebrating the 250th anniversary of American independence, researchers said Wednesday.
- One of the impersonated sites was america250.org, belonging to a non-partisan group of lawmakers, business executives, and at least one former member of the Trump administration.
- The attackers registered america250[.]holiday and used it as a reverse proxy to america250.org.
What happened
The imposter website delivered content from the real one that added malicious JavaScript into it. Open source reporting indicates that Ukrainian President Volodymyr Zelenskyy stayed there during a visit on October 14.
Why it matters
“By doing this watering hole [impersonating] the Raffles London at The OWO, the intrusion set may have sought to target diplomatic delegations and high-profile guests through targeted spear-phishing campaigns,” the researchers said.
Summary by Nerd News Network. Read the full article at Ars Technica via the links above and below.