APT29 Exploiting Spyware Exploits

bleepingcomputer.com

APT29 Exploiting Spyware Exploits - 10h

Russian APT29 is using iOS and Android exploits created by commercial spyware vendors Intellexa and NSO Group to steal cookies and passwords from government employees. This is a major security risk as the exploits are identical or strikingly similar to those used by spyware makers.

References:

@zackwhittaker - Zack Whittaker on Mastodon about APT29 Reusing Exploits - 11h
techcrunch.com - Russian government hackers found using exploits made by spyware companies NSO and Intellexa - 11h
www.bleepingcomputer.com - This news story provides details about APT29's use of exploits created by commercial spyware vendors, including Intellexa and NSO Group. - 11h
@fj - A Mastodon post that states that APT29 has been using the same exploits as Intellexa and NSO in an attack on Mongolian government websites. - 3h
securityaffairs.com - SecurityAffairs reports on APT29's reuse of NSO and Intellexa exploits. - 30d
@patrickcmiller - Google Catches Russian APT Reusing Exploits From Spyware Merchants NSO Group, Intellexa - SecurityWeek - 30d
@PrivacyDigest - Powerful Enable a New String of 'Watering Hole' Attacks Suspected have compromised a series of websites to utilize sophisticated spyware exploits that are eerily similar to those created by and . - 29d
@LukaszOlejnik - Russian cyber operators ('government hackers') were using tools that were identical or very similar to those previously created by spyware tool makers Intellex and NSO Group. It is not known how the R - 29d

Classification:

Target: Mongolian Government
Attacker: APT29
Type: Hack
Severity: Major

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.