This was my first question as well. There’s a big gap between “ad network delivers JS” and a zero-click browser exploit. CitizenLab has done some great research including OSINT on the former, but there’s a conspicuous gap between it and the DLL ending up on the victim’s machine.
This was my first question as well. There’s a big gap between “ad network delivers JS” and a zero-click browser exploit. CitizenLab has done some great research including OSINT on the former, but there’s a conspicuous gap between it and the DLL ending up on the victim’s machine.
There are mentions of CVEs in that article with Chrome exploits.
mobile ads can deliver JS-based exploits
But how do the DLLs hack you
It reads to me that the DLL is something they found later while trying to determine what the attacker was doing after they were already in.
2 replies →
[flagged]