APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits - The Hacker News

Automated excerpt

For iOS users, it leads to an exploit kit called DarkSword to harvest cookies and full device data. Class B, which targets iOS devices running iOS 18.5 and exploits the DarkSword exploit chain comprising CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510, and CVE-2025-43520 to deliver JavaScript malware for full device data exfiltration. The iPhone exploit paths that take advantage of DeadTag lead to the Coruna exploit kit for older iPhones running iOS version 13 to 17.2.1 and DarkSword P7 for iOS devices running 18.4 to 18.7.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.