Russian hackers target iOS and Android users in large-scale watering hole attack
The attackers injected malicious JavaScript code into websites to identify visitors' devices, operating systems, and browser versions.
3 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoThe attackers injected malicious JavaScript code into websites to identify visitors' devices, operating systems, and browser versions.
3 min readThe attackers used a combination of open-source tools, custom malware and AI to compromise networks and maintain access.
2 min readThe malware allowed attackers to remotely control infected devices, install additional applications, and execute shell commands.
3 min readTracked as CVE-2026-58115, the vulnerability allows attackers to access vulnerable systems without authentication.
2 min readThe group’s main targets include law enforcement agencies, justice institutions, local administrations near the front line, and organizations in the defense sector.
4 min read