CriticalCVE-2024-27834CVE-2025-43529+6 CVEs 4 Hunt LeadsIOCsRemote AttackerHands-On-KeyboardAPT29DarkSwordAndroSnitchUltimateFingerprinterSekoia
APT29 Poisoned an Analytics Script to Hack Phones Across Ukraine
Sekoia says APT29 hijacked the Plerdy analytics script, hacked sites in four countries and faked the America250 and a London hotel site to push iOS and Android n-day chains, including DarkSword and Apple's newly KEV-listed CVE-2024-27834.