Hackers use n-day exploits in zero-click attacks on iOS, Android devices
Summary
A widespread watering hole attack, attributed to Russian threat actors, is targeting users of both iOS and Android devices. These attacks leverage 'n-day' exploits to compromise devices through visits to malicious websites or fake impersonations of legitimate portals.
IFF Assessment
FOE
The article details a sophisticated attack campaign by threat actors using existing vulnerabilities for malicious purposes, posing a direct threat to user security.
Defender Context
Defenders should be aware of watering hole attacks, especially those leveraging known (n-day) vulnerabilities which can be more reliable for attackers than zero-days. Vigilance against phishing and malvertising, coupled with robust endpoint security, is crucial for mitigating such threats.