Researchers have reported that hackers, potentially connected to the Kremlin, exploited vulnerabilities in iOS and Android operating systems to target users visiting various websites. This includes america250.org, which commemorates the signing of the US Constitution. The attackers used a fake website to inject malicious JavaScript, aiming to steal sensitive information such as browser cookies and Wi-Fi passwords.
Key facts
- Hackers exploited vulnerabilities in iOS and Android systems.
- Attacks targeted visitors of multiple websites, including america250.org.
- Researchers assessed attackers as linked to Russia's Foreign Intelligence Service.
- Malicious JavaScript was injected to profile devices and steal data.
- The fraudulent site used was america250[.]holiday.
A short AI summary in our own words. The reporting belongs to Ars Technica; we don't reproduce it.