Hackers exploited iOS and Android flaws to infect phones
Researchers identified attacks where malicious JavaScript profiled devices visiting compromised websites, with tailored payloads for iOS and Android. Targets included america250.org (a non-partisan US Constitution anniversary site) and sites linked to Ukraine-related content. The attackers used domain impersonation and reverse proxies to inject malicious code, aiming to steal browser cookies, Wi-Fi credentials, and device data.
Key points
- Kremlin-linked hackers exploited known iOS and Android flaws
- JavaScript-based attacks profiled and targeted devices
- Payloads aimed to steal cookies, passwords, and device data
- Multiple websites compromised including US Constitution site
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Ars Technica did the reporting; read the original for the full story.
Read the full story at Ars Technica
