STATE-BACKED ATTACKERS AND COMMERCIAL SURVEILLANCE VENDORS REPEATEDLY USE THE SAME EXPLOITS

Summary from the TLDR InfoSec newsletter

Google's Threat Analysis Group discovered exploit campaigns targeting Mongolian government websites using iOS and Chrome vulnerabilities previously seen in commercial surveillance vendor exploits. The attackers utilized watering hole attacks to deploy sophisticated exploits and steal browser data, prompting notifications to Apple and Android partners to address the vulnerabilities. The reuse of exploits highlights the risk of dangerous threat actors acquiring tools developed by the commercial surveillance industry, emphasizing the ongoing threat of watering hole attacks on mobile devices.