Zero-day failures on WhatsApp are considerably more expensive

2023-10-05 18:50:18

Turn and move, we talk here at MacMagazine of any security breach of the type zero-day found in certain software. These vulnerabilities, in case you didn’t know, are security flaws that have not yet been discovered by the developers of an app or system, which makes them even more dangerous and destructive.

Taking this into account, it is natural that some of the most popular apps on the market, such as WhatsApp, are the most targeted by criminals and surveillance agencies around the world. AND, according to information from TechCrunchhaving access to these loopholes can cost much more than many people can imagine.

According to the outlet, last week, an unidentified Russian company that buys loopholes zero-day offered nothing less than US$20 million for a series of these bugs to its customers — mainly made up of Russian private and government companies. Compatible with both the version of WhatsApp for iOS As for Android, the flaws can be used to compromise the security of devices remotely.

The high price charged by these bugs can be explained both by the security advances in these software in recent times and by the war in Ukraine, which represents an obstacle to negotiations with Russian security researchers. Other countries, however, have also seen the price for breaches of this type increase considerably in recent years.

Leaked documents obtained by TechCrunchfor example, showed that, in 2021, a failure zero-day found in the version of WhatsApp for Android cost between US$1.7 million e US$8 million. An unidentified security researcher interviewed by the vehicle confirmed the price increase.

Related Articles:  a myriad of activities in the forest of Bourgailh on the occasion of the Night of the Stars, August 7

In 2019, according to the website, clients of the controversial Israeli security firm NSO Group were caught using vulnerabilities zero-day to attack WhatsApp users. In 2021, a failure like “zero-click RCE” — that is, which allows you to execute code remotely — was found being sold for US$1.7 million.

WhatsApp tends to attract the attention of criminals and governments because it is an app separate from the rest of a cell phone’s system, so it is not necessary to compromise the entire device to access private information. When asked, WhatsApp declined to comment on the report’s revelations.

1696535593
#Zeroday #failures #WhatsApp #considerably #expensive

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.