Hackers exploited iOS and Android flaws to infect phones
摘要
研究人员称，疑似与克里姆林宫有关的黑客利用已修复的iOS和安卓漏洞，试图攻击多个网站访客，包括美国独立250周年纪念网站。攻击者被评估为俄对外情报局成员，目标多为与俄乌战争相关的网站。用户访问被注入JavaScript的网站后，设备被识别并收到针对平台定制的恶意载荷，试图窃取浏览器Cookie，部分案例中还涉及Wi-Fi密码和移动设备数据。攻击者还仿冒ame
Hackers possibly linked to the Kremlin exploited previously patched iOS and Android flaws in an attempt to hack visitors of multiple websites, including one celebrating the 250th anniversary of American independence, researchers said Wednesday.
The attackers, which the researchers assessed with “moderate to high confidence” were part of Russia’s Foreign Intelligence Service, targeted other sites, many with links to that country’s ongoing war against Ukraine. The attacks began when iPhone or Android users visited one of potentially hundreds of different sites. JavaScript injected into the traffic then profiled the device. The final payloads, tailored to the type of platform visiting, attempted to steal browser cookies and, in some cases, Wi-Fi passwords and full mobile device data.
Wielding DarkSword
One of the impersonated sites was america250.org, belonging to a non-partisan group of lawmakers, business executives, and at least one former member of the Trump administration. The attackers registered america250[.]holiday and used it as a reverse proxy to america250.org. The imposter website delivered content from the real one that added malicious JavaScript into it.
转载信息
评论 (0)
暂无评论，来留下第一条评论吧