Russian government hackers found using exploits made by spyware companies NSO and Intellexa | TechCrunch

Google's recent findings reveal that Russian hackers have employed exploits eerily similar to those previously used by spyware firms like Intellexa and NSO Group, raising alarms over how such powerful tools can fall into the hands of malicious actors.

The activity of APT29 underscores the vulnerability of even major state and private entities to espionage and data theft, aided by exploits embedded in seemingly benign websites.

The exploit found on Mongolian government sites demonstrates the risk of 'watering hole' attacks, where unsuspecting users are compromised through targeted malicious code hidden on trusted sites.

Despite patches being available, unprotected devices remain susceptible to these attacks, highlighting the critical need for ongoing user awareness and security updates in protecting sensitive data.

Read at TechCrunch