Russia-linked hackers hit iOS and Android devices with exploit chains via watering holes

The Russian state-sponsored threat actor Midnight Blizzard reportedly targeted iOS and Android users in Europe and the US with zero-click exploits for previously patched vulnerabilities, according to Sekoia. The campaign involved compromised or cloned high-profile websites and a supply-chain attack on the Plerdy web analytics service.