APT29, an Eastern Europe-linked threat group, is distributing iOS and Android exploit tools through compromised websites and hijacked web analytics scripts, according to SlowMist CISO 23pds. The malware families DarkSword and AndroSnitch have launched mass attacks, potentially embedding backdoors in sites and apps that users normally visit. SlowMist advises users to upgrade their mobile operating systems to the latest versions to mitigate exposure to the ongoing campaign.