Lemmy
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
cm0002@infosec.pub to cybersecurity@infosec.pub · 2 days ago

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

www.wired.com

external-link
message-square
14
link
fedilink
62
external-link

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

www.wired.com

cm0002@infosec.pub to cybersecurity@infosec.pub · 2 days ago
message-square
14
link
fedilink
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.
alert-triangle
You must log in or # to comment.
  • Emtity_13@lemmy.sdf.org
    link
    fedilink
    arrow-up
    2
    ·
    18 hours ago

    Any way to tell if a phone has been affected (for both iOS and android?)

  • ohellidk@sh.itjust.works
    link
    fedilink
    arrow-up
    23
    ·
    2 days ago

    Another good reason to block em all!

    • myyass@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      14 hours ago

      Nah, gotta catch em all, STDs

  • America@sh.itjust.works
    link
    fedilink
    arrow-up
    13
    ·
    2 days ago

    They never state whether it’s iOS or android, which is frustrating

    • ReptilianCleric@lemmy.zip
      link
      fedilink
      arrow-up
      5
      arrow-down
      1
      ·
      2 days ago

      I tracked down a few different versions of the story on the web, but I couldn’t find any indication of iOS of Android. I’m assuming Android, though - doesn’t Apple control ads on their platforms? Because Google is fingered as one of the ways these ads are being distributed…

      • GottaHaveFaith@fedia.io
        link
        fedilink
        arrow-up
        19
        ·
        2 days ago

        it’s both

        Analysis of four billion Discover-Tech bidding records shows that during a four-month period, the company’s ads were shown on almost 200,000 unique websites and Android/iOS apps in dozens of countries.

        better link: https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

        • friend_of_satan@lemmy.world
          link
          fedilink
          arrow-up
          3
          ·
          2 days ago

          They say iOS and Android, but they don’t say which OS can be infected.

          Customers can use Controlium to select a user for infection or profiling based on their mobile advertising identifier

          • GottaHaveFaith@fedia.io
            link
            fedilink
            arrow-up
            2
            ·
            2 days ago

            you mean which versions?

            • friend_of_satan@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              1 day ago

              That too. There are no details that say “[iOS/Android] is vulerable to 0-click RCE” and there are no details about which OSes are vulerable. It would be great if they mentioned any of those details at all, even if just to say that they do not have those details. Instead we’re left with FUD.

              • GottaHaveFaith@fedia.io
                link
                fedilink
                arrow-up
                3
                ·
                1 day ago

                I don’t get it, Android and iOS are OSes, the article I linked says both are vulnerable, are you reading the main article ?

                • friend_of_satan@lemmy.world
                  link
                  fedilink
                  arrow-up
                  2
                  ·
                  19 hours ago

                  I don’t see anything that says either are vulnerable. The closest I can find is “exploit vulnerabilities across numerous mobile carriers”. The CVEs they list are for Chrome, Windows Kernel, and Microsoft Office.

        • ReptilianCleric@lemmy.zip
          link
          fedilink
          arrow-up
          5
          ·
          2 days ago

          Thank you! I admit the hunt for an answer started frustrating me; I visited that link, but clearly didn’t read the page carefully enough…

    • friend_of_satan@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      2 days ago

      deleted by creator

cybersecurity@infosec.pub

cybersecurity@infosec.pub

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !cybersecurity@infosec.pub

An umbrella community for all things cybersecurity / infosec. News, research, questions, are all welcome!

Community Rules

  • Be kind
  • Limit promotional activities
  • Non-cybersecurity posts should be redirected to other communities within infosec.pub.

Enjoy!

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 135 users / day
  • 403 users / week
  • 565 users / month
  • 2.16K users / 6 months
  • 1 local subscriber
  • 6.53K subscribers
  • 1.36K Posts
  • 2.5K Comments
  • Modlog
  • mods:
  • shellsharks@infosec.pub
  • tweedge@infosec.pub
  • BE: 0.19.14
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org