Interesting read.
APT29 Watering Hole Attacks Used Spyware Exploits
The Russian-backed APT29 group was seen using the same iOS and Google Chrome exploits as commercial surveillanceware vendors NSO Group and Intellexa.
duo.com