Hackers are turning web browsing into a spyware trap

Researchers at iVerify and Report URI uncovered two spyware campaigns targeting iPhones, with suspected ties to China. One infected a financial employee via an Instagram ad, stealing credentials and crypto wallet data. Another compromised nearly 8,000 websites through 630 expired domains, redirecting visitors to spyware. The attacks exploit legitimate infrastructure to steal login credentials and cryptocurrency.