APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.

"The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and

Attributed to The Hacker News RSS · Limited verification; verify facts against the linked source. Read the full article on thehackernews.com.

Source published: 04 Nov 2026, 07:57 PM IST. Source facts take precedence over AI interpretation.