Exploits by NSO Group Found in Mongolian Networks

Multiple cyber attacks have been reported on government websites in Mongolia between November 2023 and July 2024, according to Google’s Threat Analysis Group. These attacks involved exploiting vulnerabilities in iOS and Android systems to steal user data.

The hackers employed a strategy where they first identified the interests and behaviors of the target audience. They then proceeded to compromise popular websites frequented by this audience by injecting malicious code. When users visited these infected sites, their devices became compromised as well. This method is commonly used to distribute malware, conduct espionage, or steal data from a specific group of victims.

/Reports, release notes, official announcements.