The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.
« The injected JavaScript code collects browser and device attributes, » Sekoia researchers Amaury-Jacques Garçon and