Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign

Sekoia attributes a widespread APT29 campaign to Russian state-linked actors who planted malicious code on legitimate and spoofed websites and compromised a Ukrainian web analytics provider to identify and exploit vulnerable iPhones and Android devices, using known (patched) vulnerabilities and a commercial iPhone extraction toolkit (DarkSword) to harvest messages, credentials, browser data and other sensitive information from targeted devices.