Examining Mobile Threats from Russia

This report compiles open-source case studies of Russian state-linked mobile operations, describing Android and iOS spyware families (X-Agent, Monokle, Infamous Chisel, Pegasus), exploitation of WebKit and other zero-days to deliver cookie-stealers and steal credentials, SS7 signalling abuse for location and intercepts, and a high-impact destructive wiper attack on Kyivstar. It highlights persistent, sophisticated nation-state activity targeting Ukrainian military personnel, dissidents, government services and mobile networks, and concludes with mitigation recommendations for high-value targets.