58
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads (www.wired.com)
submitted 1 day ago by to c/cybersecurity@infosec.pub
13 comments fedilink hide all child comments

all 14 comments

sorted by: hot top controversial new old
[–] 1 point 4 hours ago

Any way to tell if a phone has been affected (for both iOS and android?)

  • permalink
  • fedilink
  • source
    •
    [–] 22 points 1 day ago (1 child)

    Another good reason to block em all!

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
    • [–] 13 points 1 day ago (10 children)

    They never state whether it's iOS or android, which is frustrating

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] 4 points 1 day ago (8 children)

    I tracked down a few different versions of the story on the web, but I couldn't find any indication of iOS of Android. I'm assuming Android, though - doesn't Apple control ads on their platforms? Because Google is fingered as one of the ways these ads are being distributed...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 19 points 1 day ago (7 children)

    it's both

    Analysis of four billion Discover-Tech bidding records shows that during a four-month period, the company’s ads were shown on almost 200,000 unique websites and Android/iOS apps in dozens of countries.

    better link: https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 2 points 1 day ago* (5 children)

    They say iOS and Android, but they don't say which OS can be infected.

    Customers can use Controlium to select a user for infection or profiling based on their mobile advertising identifier

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 1 day ago (4 children)

    you mean which versions?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 19 hours ago (3 children)

    That too. There are no details that say "[iOS/Android] is vulerable to 0-click RCE" and there are no details about which OSes are vulerable. It would be great if they mentioned any of those details at all, even if just to say that they do not have those details. Instead we're left with FUD.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 3 points 17 hours ago (2 children)

    I don't get it, Android and iOS are OSes, the article I linked says both are vulnerable, are you reading the main article ?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 4 hours ago* (1 child)

    I don't see anything that says either are vulnerable. The closest I can find is "exploit vulnerabilities across numerous mobile carriers". The CVEs they list are for Chrome, Windows Kernel, and Microsoft Office.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •