Gullible comments on ‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

[–] Gullible@sh.itjust.works 13 points 1 day ago (11 children)

They never state whether it's iOS or android, which is frustrating

[–] ReptilianCleric@lemmy.zip 4 points 1 day ago (9 children)

I tracked down a few different versions of the story on the web, but I couldn't find any indication of iOS of Android. I'm assuming Android, though - doesn't Apple control ads on their platforms? Because Google is fingered as one of the ways these ads are being distributed...

permalink

fedilink

source

parent

hideshow 9 child comments

[–] GottaHaveFaith@fedia.io 19 points 1 day ago (8 children)

it's both

Analysis of four billion Discover-Tech bidding records shows that during a four-month period, the company’s ads were shown on almost 200,000 unique websites and Android/iOS apps in dozens of countries.

better link: https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

permalink

fedilink

source

parent

hideshow 8 child comments

[–] friend_of_satan@lemmy.world 3 points 1 day ago* (6 children)

They say iOS and Android, but they don't say which OS can be infected.

Customers can use Controlium to select a user for infection or profiling based on their mobile advertising identifier

permalink

fedilink

source

parent

hideshow 6 child comments

[–] GottaHaveFaith@fedia.io 2 points 1 day ago (5 children)

you mean which versions?

permalink

fedilink

source

parent

hideshow 5 child comments

[–] friend_of_satan@lemmy.world 2 points 1 day ago (4 children)

That too. There are no details that say "[iOS/Android] is vulerable to 0-click RCE" and there are no details about which OSes are vulerable. It would be great if they mentioned any of those details at all, even if just to say that they do not have those details. Instead we're left with FUD.

permalink

fedilink

source

parent

hideshow 4 child comments

[–] GottaHaveFaith@fedia.io 3 points 1 day ago (3 children)

I don't get it, Android and iOS are OSes, the article I linked says both are vulnerable, are you reading the main article ?

permalink

fedilink

source

parent

hideshow 3 child comments

[–] friend_of_satan@lemmy.world 2 points 12 hours ago* (2 children)

I don't see anything that says either are vulnerable. The closest I can find is "exploit vulnerabilities across numerous mobile carriers". The CVEs they list are for Chrome, Windows Kernel, and Microsoft Office.

permalink

fedilink

source

parent

hideshow 2 child comments