Tech

Hackers exploited iOS and Android flaws to infect phones

Read full article at source ↗

Based on a feed excerpt; full article content has not been acquired. Source evidence retrieved 05/11/2026, 00:58:23 UTC.

Briefings

Researchers assessed with moderate to high confidence that Russian Foreign Intelligence Service hackers exploited patched iOS and Android vulnerabilities to infect visitors of multiple websites, including one celebrating the 250th anniversary of American independence. The attacks began when users visited potentially hundreds of sites, with JavaScript injecting malicious payloads to steal cookies, Wi-Fi passwords, and full mobile device data. The primary target was america250.org, an imposter site belonging to a non-partisan group of lawmakers and former Trump administration members, which delivered content from the real site while adding the malware. The incident occurred in late November 2026.

Key points

• Hackers assessed with moderate to high confidence were part of Russia's Foreign Intelligence Service and exploited previously patched iOS and Android flaws.
• The attacks targeted multiple websites, including america250.org, which delivered content from the real site while injecting malicious JavaScript to steal device data.

Context

This incident occurred in late November 2026, involving Russian intelligence actors targeting public websites. The attack demonstrated how patched vulnerabilities can be leveraged for data theft across various platforms, with specific focus on government-linked sites like america250.org.

Limitations

Evidence is limited to researcher assessment of moderate to high confidence regarding the Russian Foreign Intelligence Service's involvement. Specific dates for the initial attack window are not fully established, and the scope of affected sites beyond america250.org remains partially unverified.

Generated by Bittrees-hosted qwen35-2b sha256:aaf42c8b7c3c on 05/11/2026, 01:00:35 UTC. Based on publisher-provided feed evidence; may not cover the full original article. Check the source for details.

View archived briefing on IPFS
bafybeibib2e7vfjqmddttnlrzpvu2dnpvvlfnszupbz2llvmsqhqwmwoma