Hackers exploited iOS and Android flaws to infect phones

Hackers linked to the Kremlin exploited previously patched iOS and Android flaws to infect phones by impersonating websites, including one celebrating the 250th anniversary of American independence and a luxury hotel in London. The hackers added malicious JavaScript to the real websites, potentially targeting diplomatic delegations and high-profile guests through spear-phishing campaigns. The attackers also compromised other websites, including a Ukrainian gas production company and a web analytics service.