The Russian state-sponsored threat actor APT29 is executing a large-scale watering hole campaign leveraging a compromised web analytics script from the Plerdy platform. Injected JavaScript code gathers device attributes and delivers targeted exploits to mobile users visiting compromised websites.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →