Hackers Exploited iOS and Android Flaws in Phone Campaign

Security researchers say a hacking group exploited software vulnerabilities in both Apple's iOS and Google's Android to infect phones. They also say the group may have been sponsored by the Kremlin, and that its apparent aim was diplomatic targets.

That targeting points toward state-linked espionage rather than the financially motivated attacks that make up much of mobile malware. The researchers stopped short of a firm attribution, so the link to the Russian government should be read as a working hypothesis, not a confirmed finding.

The report, as summarized, does not say how many devices were compromised, which specific flaws were used, or which countries and individuals were affected. Those details would matter for judging the scope of the campaign and for knowing whether Apple and Google have shipped fixes.

The case is a reminder that phones belonging to diplomats, officials and their contacts carry sensitive communications, and that one compromised device can expose a wide circle of people. For everyone else, the standard advice still applies: install operating system updates promptly, since patches are how these flaws get closed, and treat unexpected links and messages with caution.