Хочете будувати кар’єру в Data Science та AI? Vodafone Big Data Lab відкриває новий набір —>
Оксана Степура
4 November 2026, 16:24
2026-11-04
Російські хакери використали тисячі сайтів, переважно українських, для атак на смартфони. Відкриття сторінки могло запустити крадіжку даних
Hackers linked to Russian intelligence have been targeting iPhone and Android users through hacked and fake websites, including Ukrainian ones. If a smartphone lacks the necessary security updates, simply opening a compromised website is enough to launch an attack. The attackers could then steal passwords, messages, and other personal data without any additional action from the user.
Hackers linked to Russian intelligence have been targeting iPhone and Android users through hacked and fake websites, including Ukrainian ones. If a smartphone lacks the necessary security updates, simply opening a compromised website is enough to launch an attack. The attackers could then steal passwords, messages, and other personal data without any additional action from the user.
According to their data, the APT29 group, also known as Midnight Blizzard, is probably behind the attacks. It is associated with the Russian Foreign Intelligence Service. Its hackers, in particular, hacked the website of a Ukrainian gas company and placed malicious code on it. But they managed to achieve even greater reach after hacking the Ukrainian web analytics service Plerdy.
This service is used by owners of thousands of websites, mostly Ukrainian, to track visitors' actions. From August 27 to September 3, hackers distributed malicious code via Plerdy. It was automatically downloaded on thousands of websites, mostly Ukrainian, that used this service.
Also among the resources to which the attack spread were sites related to the army, special forces, and military equipment, including drones.
When a user opened the infected page, the malicious code first checked their phone and browser version. If it found the appropriate vulnerabilities, it launched an attack tailored to the specific device.
The hackers were not limited to Ukraine. Researchers also found infected sites in the United States, the Czech Republic, and Bulgaria. In addition, the attackers created fake copies of well-known resources, including the site dedicated to the 250th anniversary of US independence or the Raffles London at The OWO hotel in London.
How hackers stole data:
On iPhone, hackers were able to access passwords, photos, location data, and WhatsApp and Telegram databases. On Android, they attempted to steal passwords, browsing history, website logins, and Wi-Fi passwords stored in Chrome.
The attacks used vulnerabilities that Apple and Google have already fixed. So users who did not install the update were most at risk. The researchers also found that the malware did not permanently stay on devices. Rebooting the smartphone could stop it from working, but it did not restore the data that had already been stolen.
To protect against these attacks, iPhone and Android owners are advised to install the latest available system and browser updates.
Previously, dev.ua reported that hackers were using compromised Ukrainian websites to distribute malware called Psychedelic. Visitors were shown a fake Cloudflare verification and asked to execute a command that launched the malware on their computer.
"Zelensky and Putin have united": Kyiv Independent readers received letters about an alleged nuclear strike on Kyiv. The editorial office announced a hack
«Росіяни завжди хочуть когось трахнути». Микита Книш розповів FT, як українські хакери видавали себе за дівчат, зламували камери відеоспостереження та россайти заради перемоги
Видання Financial Times опублікувало статтю про роботу українських хакерів у війні проти рф, засновану на розмові з українським білим хакером Микитою Книшем. Він, як і сотні інших хакерів, допомагає боротися із російськими загарбниками в кіберпросторі. Наводимо адаптований переклад матеріалу.
Британець створив інструмент для злому Starlink з деталями на $25. Чи виведе він термінал з ладу? WIRED
Британський дослідник безпеки Леннерт Воутерс створив modchip — спеціальний інструмент злому, який можна приєднати до антени Starlink. Готові деталі для нього коштують $25.
10 серпня на конференції з безпеки Black Hat у Лас-Вегасі дослідник розкрив подробиці збоїв у терміналах Starlink та розповів про те, як серія апаратних недоліків дозволяє зловмисникам отримати доступ до системи і запустити власний код на пристроях. Про це написав WIRED.
