APT29 Leverages Compromised Web Analytics to Distribute Mobile Exploits

Sekoia researchers have documented a large-scale watering hole campaign attributed to APT29, a Russia-linked threat actor. The attackers compromised…

Audit access logs to Plerdy SEO Tracker if your organization uses it; scan owned websites for anomalous JavaScript injections; ensure iOS and Android devices run latest security patches. Monitor vendor security alerts for analytics providers and perform third-party script audits on your infrastructure.