APT29 campaign uses n-day flaws to target iOS and Android devices
A watering hole campaign tied with moderate-to-high confidence to APT29 has been hitting iOS and Android users who visit compromised websites or fake portals that imitate legitimate ones. Researchers at cybersecurity company Sekoia traced the activity to pages and domains that profiled visitors, selected exploit chains by browser version, and delivered payloads without user interaction. Apple and Google have already patched the flaws used in the campaign. The report says…