Russian government hackers used spyware exploits made by NSO and Intellexa
Russian hackers are exploiting vulnerabilities similar to those from NSO Group, targeting Mongolian government websites and affecting iPhone and Android users. Google urges software updates to mitigate risks.
Read original article
Google has reported that Russian government hackers, specifically the group APT29 linked to the SVR, are utilizing exploits that closely resemble those developed by spyware companies NSO Group and Intellexa. The exploits were discovered embedded in Mongolian government websites, potentially compromising the data of visitors using iPhones and Android devices through a "watering hole" attack. This method allowed attackers to steal user account cookies from Safari and Chrome browsers, targeting Mongolian government employees. Google noted that the exploits took advantage of vulnerabilities that had been patched, indicating that unpatched devices remained at risk. The exact means by which the Russian hackers obtained these exploits is unclear, but Google suggests they may have purchased or stolen them. NSO Group has denied selling its products to Russia, asserting that its technologies are only sold to vetted U.S. and allied agencies. Google emphasized the importance of keeping software updated to mitigate such cyber threats, noting that users with high-security features enabled were not affected by the attacks.
- Russian hackers are using exploits similar to those from NSO Group and Intellexa.
- The attacks targeted Mongolian government websites, affecting users of iPhones and Android devices.
- Exploits took advantage of previously patched vulnerabilities, highlighting risks for unpatched devices.
- NSO Group denies selling products to Russia, claiming its technologies are for vetted agencies only.
- Google advises users to keep software updated to prevent cyberattacks.
Related
Mac users served info-stealer malware through Google ads
Mac users targeted by info-stealer malware via Google ads promoting fake Arc browser for Mac. Malware sends data to Poseidon info stealer control panel, extracting wallets and passwords. Google disclaims responsibility. Users urged caution.
Apple alerts iPhone users in 98 countries to mercenary spyware attacks
Apple warns iPhone users globally about mercenary spyware attacks, emphasizing threat seriousness. No specific attackers or countries disclosed. Apple's proactive stance aims to protect users from evolving cybersecurity threats.
Hackers breach ISP to poison software updates with malware
A Chinese hacking group, StormBamboo, breached an ISP to inject malware into software updates, exploiting insecure mechanisms. They redirected requests to install malware on victims' devices, including a malicious Chrome extension.
Mac and Windows users infected by software updates delivered over hacked ISP
Hackers compromised an ISP to deliver malware to Windows and Mac users via software updates, affecting multiple applications. Users are advised to avoid insecure updates and use secure DNS protocols.
China-linked cyber-spies infect Russian govt, IT sector
Chinese cyber-spies compromised Russian government and IT systems using malware, including GrewApacha and CloudSorcerer, through phishing emails and cloud services, indicating collaboration among state-sponsored hacking groups.
0 commentsRelated
Mac users served info-stealer malware through Google ads
Mac users targeted by info-stealer malware via Google ads promoting fake Arc browser for Mac. Malware sends data to Poseidon info stealer control panel, extracting wallets and passwords. Google disclaims responsibility. Users urged caution.
Apple alerts iPhone users in 98 countries to mercenary spyware attacks
Apple warns iPhone users globally about mercenary spyware attacks, emphasizing threat seriousness. No specific attackers or countries disclosed. Apple's proactive stance aims to protect users from evolving cybersecurity threats.
Hackers breach ISP to poison software updates with malware
A Chinese hacking group, StormBamboo, breached an ISP to inject malware into software updates, exploiting insecure mechanisms. They redirected requests to install malware on victims' devices, including a malicious Chrome extension.
Mac and Windows users infected by software updates delivered over hacked ISP
Hackers compromised an ISP to deliver malware to Windows and Mac users via software updates, affecting multiple applications. Users are advised to avoid insecure updates and use secure DNS protocols.
China-linked cyber-spies infect Russian govt, IT sector
Chinese cyber-spies compromised Russian government and IT systems using malware, including GrewApacha and CloudSorcerer, through phishing emails and cloud services, indicating collaboration among state-sponsored hacking groups.