Russia-Linked APT29 Used Watering Holes to Serve iOS and Android n-Day Exploits
Sekoia says the campaign used injected JavaScript, lookalike proxy domains, hijacked Plerdy analytics script to silently deliver patched exploit chains that stole cookies, messages and Wi‑Fi credentials.
