# Researchers link mobile browser attacks to Russian group APT29

_Published Wednesday, November 4, 2026 at 5:22 AM EST · Security · Latest · Tier 2 — Notable_

![Researchers link mobile browser attacks to Russian group APT29 — Primary](https://www.bleepstatic.com/content/hl-images/2026/07/13/Russian_hacker.jpg)

Sekoia researchers identified a campaign using compromised and impersonated websites to deliver attacks against iOS and Android devices without user interaction. They attributed the operation to Russian group APT29 with moderate-to-high confidence.

Website code profiled visitors' devices and browsers before a server selected exploits for previously disclosed vulnerabilities. Payloads collected data including cookies, credentials and messaging databases. The operation also compromised Plerdy's SEO tracker, loaded by thousands of websites between August 27 and September 3. Apple and Google have patched all targeted flaws. The analyzed payloads did not establish persistence, so rebooting stopped malicious activity until another visit to a compromised site.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-use-n-day-exploits-in-zero-click-attacks-on-ios-android-devices/)

---
Canonical: https://techandbusiness.org/newswire/cvwrdQLb7QX2mPC4ecIZ9A
Published: 2026-11-04T10:22:08.831Z
Story chronology: 2026-11-04T09:39:54.000Z
Retrieved: 2026-11-04T13:18:57.215Z
Publisher: Tech & Business (techandbusiness.org)