- A watering hole attack compromised a Hong Kong pro-democracy radio station news website. - The attackers served a Safari exploit that installed cyberespionage malware DazzleSpy on site visitors’ Macs. - Targets are likely to be politically active, pro-democracy individuals in Hong Kong. - The vulnerability could also have been exploited on iOS, even on devices such as the iPhone XS and newer. In fact, this campaign has similarities with one from 2020 where LightSpy iOS malware was distributed the same way. - The payload – DazzleSpy – is capable of a wide variety of cyberespionage actions. - ESET Research...