Securing the devices running iOS and Android operating systems is now costly due to improved defenses.
According to a recent report by TechCrunch, there has been a surge in the demand for zero-day exploits that can be used to hack into popular instant messaging apps like WhatsApp.
These exploits are now being sold for millions of dollars, highlighting the growing threat of cyber attacks on communication platforms that are widely used by millions of people across the globe.
It is important for users to be vigilant and take necessary precautions to secure their personal and sensitive information while using these apps.
Recently, a Russian firm sought to purchase undisclosed software vulnerabilities for $20 million, exclusively for Russian government and private sector use, enabling remote access to iOS and Android phones.
The high price reflects limited researchers willing to cooperate due to the Ukraine situation, with Russian government customers willing to pay extra.
Implementing AI-Powered Email security solutions “Trustifi” can secure your business from today’s most dangerous email threats, such as Email Tracking, Blocking, Modifying, Phishing, Account Take Over, Business Email Compromise, Malware & Ransomware
Beyond Russia, even in niche app markets, zero-day prices have surged significantly as the leaked documents reveal that in 2021, a WhatsApp Android bug enabling message access ranged from $1.7 to $8 million.
According to an anonymous security researcher, prices have surged, especially for WhatsApp vulnerabilities, favored by government hackers, as seen when NSO Group customers used a zero-day in 2019.
WhatsApp has filed a lawsuit against an Israeli surveillance technology vendor for allegedly facilitating zero-day abuse. The leaked documents reportedly exposed a staggering price of $1.7 million for a ‘zero-click RCE’ in WhatsApp, which would permit covert monitoring and retrieval of messages.
The document stated the exploit targeted Android versions 9 to 11 through an image rendering library flaw. WhatsApp addressed related vulnerabilities in 2020 and 2021, but it’s uncertain if they covered the exploits sold in 2021.
However, besides this, WhatsApp declined to comment. While targeting WhatsApp alone can be valuable for government hackers who focus on chat interception, a WhatsApp exploit can also be a step in compromising the entire device.
Exploit buyers seek tools for spying, often requiring multiple pieces to fulfill their objectives, according to an anonymous security researcher familiar with the market.
Protect yourself from vulnerabilities using Patch Manager Plus to patch over 850 third-party applications quickly. Take advantage of the free trial to ensure 100% security.
Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…
Hackers are making some phishing pages harder to track by changing the code delivered to…
A cyber incident reportedly forced a British power plant to halt operations for about four…
Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…
TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…
A fake student resume is being used to place a remote-access tool on researchers’ Windows…