# APT29-Linked Hackers Hijack Web Analytics Script to Target iOS and Android

Researchers say hackers tied to Russia's APT29 group compromised a widely used web analytics script so that it served exploits to visitors' iPhones and Android devices. The tampered script turned ordinary website traffic into a delivery channel for mobile exploits, the kind of supply-chain attack that can reach many sites at once. It matters because a nation-state actor is now using trusted third-party code to hit mobile targets at scale.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/11/apt29-linked-hackers-hijack-web.html) — Wed, 04 Nov 2026 19:57:52 +0530