Threat Intelligence Brief
Curated summary with source attribution
Source: thehackernews.com
Threat Risk: High
Victim: Apple device users and government agencies
Incident: APT29 exploited patched Apple vulnerabilities to deploy info-stealing malware.
Impact: Unauthorized access to browser cookies and device data.
Attacker: APT29 (Cozy Bear/Midnight Blizzard)
Analysis: APT29 is utilizing a combination of WebKit RCE and pointer authentication bypasses to deploy info-stealing malware. The campaign leverages diverse entry points, including supply chain compromises and spoofed websites, to profile and infect targets. This activity highlights the risk posed by delayed patching against state-sponsored adversaries.
Recommendations: Update iOS, iPadOS, and macOS to the latest versions immediately.; Audit third-party SEO and marketing trackers for unauthorized changes.; Implement browser security enhancements to mitigate zero-click WebKit exploits.
Source: The Hacker News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source