About past, present and future of Ukraine

Search mobile

Main War Russian hackers target the Mongolian government

War

Russian hackers target the Mongolian government

3181
Russian hackers target the Mongolian government

Share this article

The hackers aimed to extract browser cookies from infected devices. Google notified the Mongolian Cybersecurity Bureau, as well as Apple, Google, and Android, about the identified threat. Google revealed the espionage campaign targeting Mongolian government websites, which is believed to be carried out by Russia-supported hackers, as reported by The Record.

Security researchers have identified a cyberattack that used exploits previously employed by commercial surveillance providers Intellexa and NSO Group, making it unique.

A Google representative informed the publication that researchers first detected the use of these exploits by suspected members of the Russian hacker group known as APT29. However, it remains unknown how these exploits came into the hackers' hands and whether Intellexa or NSO Group deliberately sold them to the Russian government.

During this campaign, which lasted from November 2023 to July 2024, the attackers employed "watering hole" tactics—attacking popular websites frequently visited by their target users. They injected malicious code into the websites of the Mongolian Ministry of Foreign Affairs and the Cabinet of Ministers.

The attack initially targeted iPhone users, later adding versions for Android and Chrome. Although patches were released for all vulnerabilities, the attack could still have been successful against those who did not update their devices.

 

The Odessa Journal
more articles

Top article

The Ministry of Defense has signed a contract for the construction of a service center for repairing drones in Ukraine
War

The Ministry of Defense has signed a contract ...

Dmytro Kuleba: Ukraine and Croatia have agreed to use Croatian ports for exporting Ukrainian grain
Business

Dmytro Kuleba: Ukraine and Croatia have agree ...

New sanctions: Defence industry, political parties and individuals linked to oligarchs
Business

New sanctions: Defence industry, political pa ...

Volodymyr Zelensky: We are preparing for the next Ramstein meeting, we expect solidly grounded decisions to meet the prospects on the battlefield
War

Volodymyr Zelensky: We are preparing for the ...