CybersecuritySep 30, 2026Source outlet: The Record

Spy in the Pocket

Ukraine warns that Russia-linked hackers are hijacking soldiers' and officials' phones through infected websites, stealing messages in minutes.

Key terms

Exploit kitWatering holeEspionageSpyware

2.1.C.7In the final phase of an attack, many adversaries try to evade detection by removing or editing log files and erasing other files they may have planted on devices (e.g., malware).Learning objective: Describe the phases of a cyberattack.
4.1.B.1Malware is malicious software that can damage or destroy a device or network, or allow an adversary access to a device and the data on the device.Learning objective: Identify the type of malware used in a cyberattack.
4.1.C.1Adversaries can develop exploits for known vulnerabilities in software (including operating systems). Devices with unpatched software are vulnerable to these exploits, which could allow an adversary to crash a system, view…Learning objective: Explain how adversaries can exploit common device vulnerabilities to cause loss, damage, disruption, or destruction.

1.3.A.4Malware can cause devices to behave abnormally, slow down, crash, or become unusable. Malware can allow attackers to access files, monitor activity, or take remote control of a device. Infected devices may also be used to…Learning objective: Identify the impacts of digital and physical attacks on individual devices.
1.4.B.3To prevent exploitation of known vulnerabilities that can lead to device compromise or data loss, users should keep all software and firmware current. Software refers to applications and operating systems, while firmware is…Learning objective: Implement device- and account-level security practices to prevent phishing, credential compromise, and data loss.
4.1.A.3When confidentiality is compromised, systems are vulnerable to having sensitive data exposed or stolen. A breach of confidentiality can be identified by: • unauthorized access • network traffic showing exfiltration of…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.