Cpe:2.3:o:qualcomm:sm7635p_firmware:-:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3oqualcommsm7635p_firmware-/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 11:40:45 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMidnight Blizzard: Mobile watering hole campaign targeting iOS and Androidhttps://feed.craftedsignal.io/briefs/2026-11-midnight-blizzard-mobile-watering-hole/Thu, 05 Nov 2026 11:40:45 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-midnight-blizzard-mobile-watering-hole/Russian state-sponsored actor Midnight Blizzard (APT29) is leveraging watering holes and lookalike domains to deliver n-day exploit chains against mobile devices.<p>The cybersecurity firm Sekoia reports that the Russian state-sponsored threat actor Midnight Blizzard (APT29) has targeted iOS and Android users in the US and Europe through a large-scale watering hole campaign.</p> <p>The campaign involves compromising or cloning high-profile websites to deliver malicious JavaScript that fingerprints visitors. In some instances, the actor utilized adversary-in-the-middle (AiTM) setups with lookalike domains to target high-profile organizations. The campaign relies on n-day exploit chains - utilizing the DarkSword exploit kit for iOS and targeting previously patched vulnerabilities for Android - to exfiltrate device data.</p> highthreat