Comment by limagnolia
4 days ago
The article contains no information on which browsers are impacted, what exploit is being used, if it has been patched, etc? Does anyone know more about how this ad network is exploiting browsers to install spyware on the users machine?
Buried in the Citizenlab report are links to CVEs from Windows and Chrome that the report says were exploited. These CVE's date back to the early 20's and have been patched.
As I skimmed the CitizenLab report, it was particularly interesting to see the history of the company and how they may have been acquired specifically to use as a covert operation.