Hackers Exploit iOS and Android Flaws to Infect Phones, Targeting U.S. Constitution Anniversary Site
Hackers, possibly linked to Russia's Foreign Intelligence Service, exploited previously patched iOS and Android flaws to infect mobile phones. These attacks targeted visitors of multiple websites, including one celebrating the 250th anniversary of American independence (america250.org). The attackers registered a lookalike domain, america250[.]holiday, which acted as a reverse proxy to the legitimate site, injecting malicious JavaScript. This script profiled devices and delivered payloads designed to steal browser cookies, Wi-Fi passwords, and extensive iPhone data. Researchers from security firm Sekoia assessed with "moderate to high confidence" that Russia's Foreign Intelligence Service was behind these attacks. Another targeted site, theowo[.]club, proxied a luxury hotel near sensitive UK government institutions.