
APT29 Conducts Watering Hole Attacks Targeting Mobile Users
The Russian state-sponsored threat actor APT29 has been observed conducting watering hole attacks targeting mobile users. After compromising websites frequently visited by the target group, the attackers fingerprint victim devices and harvest information from those identified as "interesting." The attacks were first reported by Dark Reading on November 5, 2026. While thousands of users may have been exposed through the compromised sites, the group selectively harvests data from identified targets. No specific CVE or patch is associated with the campaign; mitigation focuses on standard mobile security hygiene.
