# Hackers exploited iOS and Android flaws to infect phones

- URL: https://talkfuse.com/story/hackers-exploited-ios-and-android-flaws-to-infect-phones/
- Published: 2026-11-04T22:26:49+00:00
- Updated: 2026-11-05T00:05:53+00:00
- Original publisher: Ars Technica
- Original article: https://arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones/
- Topics: Cybersecurity, Gadgets, Research, Science, Technology

## Key points

- Hackers targeted visitors using flaws in outdated mobile software.
- Impersonated sites included a US anniversary project and a London hotel.
- Researchers suspect links to Russia’s foreign intelligence service.

## Summary

Researchers say hackers possibly linked to Russia’s Foreign Intelligence Service used flaws in outdated iOS and Android software to target visitors to multiple websites. The campaign matters because it appears to have sought information from diplomatic and other high-profile targets, while compromising or impersonating trusted sites to reach them.

The targets included a website for the US Constitution’s 250th anniversary, a luxury London hotel, and Ukrainian websites, including a gas producer and an analytics service. Injected JavaScript profiled devices before delivering one of three zero-click exploit chains; payloads sought browser cookies and, in some cases, Wi-Fi passwords and device data. The vulnerabilities had already been patched, so the attacks worked only on devices running older software. Researchers assessed the Russian attribution with moderate to high confidence, citing the targets and similarities to a previous campaign.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.