Researchers said hackers possibly linked to the Kremlin exploited previously patched iOS and Android flaws to infect visitors of dozens of websites, including america250.org, a site marking the 250th anniversary of American independence. The attackers used proxy domains such as america250.holiday and theowo.club, as well as a compromised Ukrainian web analytics service, to inject identical JavaScript into traffic. The script profiled the device and then delivered one of three zero-click exploit chains, including DarkSword, an iOS exploit kit noted by Google researchers. All vulnerabilities were “n-days” and only worked on outdated iOS or Android versions. The campaign targeted sites with links to Russia’s war in Ukraine and high-profile locations like a luxury hotel near the UK Ministry of Defence, suggesting a focus on diplomatic and political figures. 1