APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Rus­sia-lin­ked th­reat actor known as APT29 is said to be behind a large-scale wa­te­ring hole cam­paign tar­ge­ting iOS and An­dro­id users th­rough com­pro­mi­sed web­si­tes, fake do­mains, and a supply chain at­tack in­vol­ving a Ukrai­nian web analy­tics ser­vi­ce ca­lled Plerdy SEO Trac­ker. "The in­jec­ted Ja­vaS­cript code co­llects brow­ser and de­vi­ce at­tri­bu­tes," Se­koia re­sear­chers Amaury-Jac­ques Garçon…