Plerdy

Reported Context (3)

objectives. Further analysis of these seemingly unrelated websites revealed a common denominator: the Plerdy SEO Tracker, a third-party component that had been compromised by the intrusion set for one week. Sekoia Details APT29-Linked Watering-Hole Campaign Using Patched Mobile Exploits
websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. Sekoia Links APT29 to Mobile Watering-Hole Campaign Using Hijacked Analytics Script
to high-profile websites. Hackers also compromised a web analytics tool made by the Ukrainian company Plerdy. The threat actor exploited known, already-patched vulnerabilities in each attack, targeting out-of-date Sekoia Attributes Mobile Watering-Hole Campaign to Russia’s APT29

CVE (10)

Malware (4)

People (4)

Threat Actors (4)

MITRE ATT&CK (14)

Vendors (2)

Products (4)

Tools (6)

Industries (6)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.