Update iPhone, Android and Chrome: Russian hackers exploit already-fixed phone flaws

Security firm Sekoia says Russia's APT29 planted attacks on hacked and cloned websites that steal data from out-of-date iPhones and Android phones. Every flaw used was already patched, so updated phones are safe.

In this brief: 3 sections 2 min read

- iPhones on iOS 16.7 (the chain may work from 16.0 to 17.4) and iOS 18.5, and Android phones with Chrome 139 to 145 except 143. Sekoia found the attacks on sites tied to Ukraine, the US and Europe, but anyone visiting a poisoned page on an old phone could be hit.
- On iOS 16.7: browser and app cookies. On iOS 18.5, using the DarkSword toolkit: messages, Keychain passwords, location, health data and photos. On Android: Chrome cookies, saved logins, browsing history and Wi-Fi passwords.
- iPhone: Settings, General, Software Update. Android: Settings, System or Software update, then update Chrome in the Play Store. If your iPhone is stuck on iOS 16, make sure it has at least 16.7.8. If you think you visited an affected site on an old phone, change important passwords after updating.

Read full analysis on sekoia.com

Useful?