--- title: Russian Hackers Exploit Browser Vulnerabilities in... description: Cybersecurity experts have identified a series of sophisticated cyberattacks by the Russian state-backed group APT29, targeting Apple Safari and Google Chrome... canonical: https://daily.dev/posts/russian-hackers-exploit-browser-vulnerabilities-in-sophisticated-cyberattacks-nvi6iz4oo twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Russian Hackers Exploit Browser Vulnerabilities in Sophisticated Cyberattacks | daily.dev og:description: Cybersecurity experts have identified a series of sophisticated cyberattacks by the Russian state-backed group APT29, targeting Apple Safari and Google Chrome... og:url: https://daily.dev/posts/russian-hackers-exploit-browser-vulnerabilities-in-sophisticated-cyberattacks-nvi6iz4oo og:image: https://api.daily.dev/og/posts/nVI6IZ4oo.png og:image:alt: Russian Hackers Exploit Browser Vulnerabilities in Sophisticated Cyberattacks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Russian Hackers Exploit Browser Vulnerabilities in Sophisticated Cyberattacks **[Collections](https://daily.dev/sources/collections)** · 2 min read · 3 upvotes · 0 comments ## Summary Cybersecurity experts have identified a series of sophisticated cyberattacks by the Russian state-backed group APT29, targeting Apple Safari and Google Chrome browsers. These attacks leveraged unpatched vulnerabilities in a prolonged campaign from November 2023 to July 2024, specifically targeting mobile users through Mongolian government websites. The use of n-day exploits highlights the risks of unpatched software. Experts stress the importance of timely security updates to counter such threats. ## Content # Russian Hackers Exploit Browser Vulnerabilities in Sophisticated Cyberattacks ## Introduction Cybersecurity experts have recently uncovered a series of high-profile cyberattacks targeting Apple Safari and Google Chrome browsers. These sophisticated attacks leveraged now-patched vulnerabilities and were attributed to the Russian state-backed group APT29. Notably, these exploits were delivered through watering hole attacks on Mongolian government websites, specifically aiming at mobile users with unpatched devices. ## Details of the Attacks The attacks utilized multiple vulnerabilities to deploy information-stealing malware, causing significant concern within the cybersecurity community. Detailed analyses revealed that these exploits were strikingly similar to those developed by well-known spyware companies such as Intellexa and NSO Group. APT29, linked to Russia’s Foreign Intelligence Service, was found embedding these exploits on Mongolian government websites. Google's Threat Analysis Group reported that these campaigns occurred from November 2023 to July 2024, indicating a prolonged and focused effort to compromise iPhones and Android devices. ## Techniques and Exploits Used The campaigns used n-day exploits, which are vulnerabilities with available patches that have not yet been applied by all users. Although security measures like Site Isolation in Chrome offer protections, attackers adapted by exploiting additional vulnerabilities to deliver their malicious payloads. These findings underscore the critical risks posed by unpatched software and the role of vulnerability brokers in supplying exploits to spyware vendors. ## The Importance of Staying Updated Google and other cybersecurity entities stress the importance of prompt patching and keeping software up-to-date to thwart such cyber threats. Despite available patches, many users remain vulnerable, highlighting the need for better awareness and quicker adoption of security updates. ## Conclusion The collaboration between state-backed attackers and commercial surveillance vendors in exploiting browser vulnerabilities presents an ongoing challenge. By understanding these threats and rigorously maintaining software updates, individuals and organizations can better protect themselves against such sophisticated cyberattacks. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber), [#google-chrome](https://daily.dev/tags/google-chrome), [#safari](https://daily.dev/tags/safari) [View this post on daily.dev](https://daily.dev/posts/russian-hackers-exploit-browser-vulnerabilities-in-sophisticated-cyberattacks-nvi6iz4oo) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Russian Hackers Exploit Browser Vulnerabilities in Sophisticated Cyberattacks","url":"https://daily.dev/posts/russian-hackers-exploit-browser-vulnerabilities-in-sophisticated-cyberattacks-nvi6iz4oo","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/russian-hackers-exploit-browser-vulnerabilities-in-sophisticated-cyberattacks-nvi6iz4oo"},"datePublished":"2024-08-30T11:47:36.950Z","dateModified":"2024-08-30T11:47:56.140Z","description":"Cybersecurity experts have identified a series of sophisticated cyberattacks by the Russian state-backed group APT29, targeting Apple Safari and Google Chrome...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a4f37b4cf3cabaeeec73965b2713afef?_a=AQAEuiZ","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a4f37b4cf3cabaeeec73965b2713afef?_a=AQAEuiZ","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/russian-hackers-exploit-browser-vulnerabilities-in-sophisticated-cyberattacks-nvi6iz4oo","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber,google-chrome,safari","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Russian Hackers Exploit Browser Vulnerabilities in Sophisticated Cyberattacks"}]} ```