Hackers assessed with moderate-to-high confidence as part of Russia’s Foreign Intelligence Service used compromised and impersonated websites to target phones. Malicious code sought browser cookies, Wi-Fi passwords and device data, with possible diplomatic targets linked to the war in Ukraine.