From Dev.to
APT29-Linked Poisoned Source Campaign Hijacks Plerdy Analytics Script to Push DarkSword iOS and Android Exploit Chains
TL;DR what: APT29-linked operators compromised legitimate websites, built lookalike domains and poisoned the Plerdy SEO Tracker script to fingerprint mobile visitors and serve platform-specific N-...