What a coincidence. Spyware makers, Russia's Cozy Bear seem to share same exploits

Google's Threat Analysis Group observed APT29 compromising Mongolian government websites in a watering-hole campaign that deployed mobile exploits (including CVE-2023-41993 and an Android V8/Chrome flaw). TAG noted the exploit code was identical or strikingly similar to commercial spyware vendors' tools (NSO, Intellexa), highlighting proliferation of CSV-developed exploits to state-backed actors and continued risk to regular visitors of compromised sites.