APT29 Poisoned an Analytics Script and Served Phone-Hacking Exploits to Thousands of Sites — No Clicks Required. Patch Your Phone Now
A Russian state espionage group quietly turned a popular piece of website tracking code into a phone-hacking delivery system — and the whole attack needed exactly one thing from you: visiting an affected page. No…