UkraineHackers compromised an analytics script serving thousands of sites.
Sekoia ties the campaign to APT29, an espionage group linked to Russia’s foreign intelligence service.
Attackers identified visitors’ devices and software versions, then exploited known flaws, sometimes without a click, to steal passwords, messages and location history.
Researchers found no evidence that Volodymyr Zelensky, who reportedly stayed at the Raffles in October, was targeted.
How each outlet framed it
- The Record leans critical
- attributes the campaign to APT29 via Sekoia and notes a fake America250 site and a fake Raffles London page, along with a compromised Ukrainian analytics service
Sources: The Record