Hackers linked to Russia's Foreign Intelligence Service exploited previously patched vulnerabilities in iOS and Android devices to target visitors of multiple websites, including a site celebrating American independence and a luxury UK hotel near sensitive government institutions. The attackers used JavaScript injection, proxy domains, and a compromised Ukrainian web analytics service to deliver three zero-click exploit chains, including the DarkSword iOS exploit kit. The attacks aimed to steal browser cookies, Wi-Fi passwords, and device data from diplomatic and high-profile targets related to Ukraine.
