APT29, a Russian threat group, has conducted a large-scale watering hole campaign targeting iOS and Android users through compromised legitimate and fake websites to deploy platform-specific n-day zero-click exploits. These exploits, including several zero-days patched by Apple and Google, allowed attackers to steal cookies, messaging app databases, credentials, and other sensitive information without user interaction. Security researchers recommend users apply the latest security updates to protect their devices from these ongoing attacks.
Hackers Use N-Day Exploits in Zero-Click Attacks on iOS, Android Devices
