5 ms·
I wonder how often less high profile folks get hit with stuff like this? On one hand, zero days are rare and expensive. OTOH someone who isn't the CEO of a ma
by clubm8 7y ago
I wonder how often less high profile folks get hit with stuff like this?
On one hand, zero days are rare and expensive.
OTOH someone who isn't the CEO of a major company might not notice the malware, or if they do, not know they should forward it to an organization like Citizen Lab.
- OrgNet 7y ago> zero days are rare really?
- bob33212 7y agoZero days are plentiful. But there are only a handful that you could buy today which could potentially give you access to a CEO's phone. The only other option is to build your own team to find a zero day for you, which is not cheap or quick.
- clubm8 7y agoA better saying is that zero days are... fragile? You use zero, someone notice, it gets fixed. And yes, they are rare compared to the vast # of known vulns. Ideally if given the choice, you'd utilize a known vuln against outdated software rather than risk burning your zero day.
- sn41 7y agoIf you aren't a high profile target, you may not be worthy of being targeted specifically. Of course, as in the Ashley Madison and Equifax cases, you might be compromised along with thousands of others. Zero days are expensive for individuals and small companies, but what happens when state actors are involved?
- clubm8 7y ago>If you aren't a high profile target, you may not be worthy of being targeted specifically. That's what I am questioning. There are many sysadmins, key executives in tech companies, or open source contributors who may not be "high profile" in the traditional sense but be juicy targets. Arguably there are more useful targets to hack than a CEO who's assuming their every move is being studied and always keeps truly sensitive conversations verbal.