Hackers use n-day exploits in zero-click attacks on iOS, Android devices

A large-scale watering-hole campaign attributed by Sekoia to Russia’s APT29 has used n-day exploit chains to attack iOS and Android users with no user interaction, BleepingComputer reports. Compromised and lookalike sites profiled visitors and delivered platform-specific exploits to steal cookies, messaging app databases and credentials, and Apple and Google have patched the flaws used.