March 28, 2023

March 28, 2023

-

-

-

-

-

-

-

-

Finding and exploiting 0day for commercial reasons. This is really weird, especially because an N-day (or pool of N-days) would work just fine. No one does timely Android updates.

At the beginning of this month, multiple Chinese security researchers published articles pointing to an e-commerce giant that had developed and exploited multiple vulnerabilities to escalate privileges and ultimately gain full control over users’ smartphones.

Upon successful privilege escalation, the malicious application could prevent users from uninstalling it, deceive and lure users, collect a wide range of users’ private information, and steal information from competing apps. Its ultimate goal is to significantly increase its installation and activity rates, prompting more conversions and boosting sales.

-

If only the intelligence was accurate, then the policy makers wouldn’t have been duped into deciding to invade Iraq. 🙃

-

-

-

-

-

-

Reply

or to participate.