Sekoia Links APT29 to Watering Holes Serving Mobile Exploits via Plerdy
Sekoia assesses with moderate to high confidence that a campaign using a compromised Ukrainian analytics script and several sites to serve patched n-day exploits to iPhone and Android visitors is APT29 or a subgroup. One iOS bug was added to CISA KEV on 4 November.
5 Nov 2026 · 3 min read