Researchers say attackers used previously fixed iOS and Android flaws in a campaign targeting visitors to selected websites.
They estimate hundreds of sites may have been targeted.
Website traffic included added elements that checked a visitor’s device before platform-specific programs attempted to steal browsing data—and, in some cases, Wi-Fi passwords and all device data.
Successful theft was not confirmed.
The attacks began when someone visited one of these websites. Hidden elements added to the website connection looked at what device the visitor was using. Then, depending on whether they had an iPhone or Android, different programs were activated that attempted to steal browsing data. In some cases, they also tried to steal Wi-Fi passwords and all of the mobile data. It has not been confirmed that they were able to steal any data.
One of the websites mimicked was america250.org, which is owned by a nonpartisan group of lawmakers, business executives and at least one former member of the Trump administration. The attackers created a similar website, america250[.]holiday, which displayed content from the real website along with hidden elements that could affect visitors’ phones.
Research firm Sekoia believes the attackers may have chosen america250.org because of its connection to an important national holiday. They may have wanted to use invitations as a pretext to send targeted misleading messages.
↳
READ ALSO
HACKS.GR / RELATED
Cyber Attacks & Data Breaches
DreamHost confirms breach: perpetrators had access for months
↗
The attackers also impersonated the website of the luxury Raffles of London OWO hotel, using theowo[.]club. The hotel is located close to important UK government institutions, such as the Ministry of Defence and 10 Downing Street. According to open source reports, Ukrainian President Volodymyr Zelensky stayed there during his visit on 14 October.
Investigators estimate with medium to high certainty that the perpetrators belonged to the Russian Foreign Intelligence Service.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)