The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes,"... Weiterlesen: APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and A…
Intelligence View
⚡ tsecurity.de Intelligence
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
10 sources
CVE-2026-119179 | MongoDB Node.js Driver up to 6.21.x/7.7.x Connection Management information disclosure (WID-SEC-2026-4328)
9 more sources
VVulDB Updates2 hours agoCVE-2026-119672 | MongoDB Database Tools up to 100.20.0 mongofiles privileges management (WID-SEC-2026-4328) VVulDB Updates2 hours agoCVE-2026-120678 | MongoDB C Driver up to 1.30.14/2.5.7 memory leak (WID-SEC-2026-4328) VVulDB Updates2 hours agoCVE-2026-120673 | MongoDB Rust Driver up to 3.9.0 Diagnostic Tracing information disclosure (WID-SEC-2026-4328) VVulDB Updates2 hours agoCVE-2026-120684 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS uninitialized pointer (Nessus ID 376173 / WID-SEC-2026-4328) VVulDB Updates2 hours agoCVE-2026-120952 | MongoDB Atlas SQL ODBC Driver up to 3.0.0 out-of-bounds write (WID-SEC-2026-4328) VVulDB Updates2 hours agoCVE-2026-120953 | MongoDB Atlas SQL JDBC Driver up to 4.0.0 Authentication redirect (WID-SEC-2026-4328)
+3
6 sources
CVE-2026-120757 | HDF Group HDF5 up to 2.2.x External Link Traversal src/H5Lexternal.c H5L__extern_traverse heap-based overflow (Nessus ID 376178)
5 more sources
VVulDB Updates3 hours agoCVE-2026-120755 | HDF Group HDF5 up to 2.2.x Szip Filter src/H5Zszip.c H5Z__filter_szip out-of-bounds (Nessus ID 376175) VVulDB Updates2 hours agoCVE-2026-120758 | HDF Group HDF5 up to 2.2.x Local Heap src/H5HL.c H5HL_unprotect null pointer dereference (Nessus ID 376172) VVulDB Updates5 hours agoCVE-2026-120754 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset uninitialized pointer (Nessus ID 376187) VVulDB Updates5 hours agoCVE-2026-19029 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset heap-based overflow (EUVD-2026-93981 / Nessus ID 376187) VVulDB Updates3 hours agoCVE-2026-120756 | HDF Group HDF5 up to 2.2.x Object Header Decoding src/H5Ocache.c H5O__chunk_deserialize heap-based overflow (Nessus ID 376181)
6 sources
DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails
5 more sources
CCyber Security News2 hours agoDreamHost Confirms Cyberattack Exposing Customer FTP, SFTP and Email Passwords IIT Security News2 hours agoDigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents CCyber Security News4 hours agoHackers Breach French Bank Crédit Mutuel Arkéa Through Third-Party Provider to Steal Funds IIT Security News4 hours agoDreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails LLatest from TechRadar6 hours agoHarvard University reveals data breach exposed 851,000 accounts
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4319656/secure-programming/apt29-linked-hackers-hijack-web-analytics-script-to-deliver-ios-and-android-exploits/