4 ms·
So the payload would be some corrupted video file sent to Bezo's phone. Would the attack look something like: 1) Discover/buy/steal Bezo's Whatsapp number (how
by hoten 6y ago
So the payload would be some corrupted video file sent to Bezo's phone. Would the attack look something like:
1) Discover/buy/steal Bezo's Whatsapp number (how did they do that...)
2) Discover/buy/steal a 0-day bug in Whatsapp.
3) Write and compile a program that reads SMS from the OS and beacons it to some server you control.
4) Create a corrupted video file that would trigger the video parsing bug, and within that video file place the compiled program from the previous step in the correct place so that it gets executed.
5) Send to Bezos.
- deleted 6y ago[deleted]
- pjc50 6y agoYes, that seems like a reasonable summary. (3) is the kind of thing that exploit developers will have "off the shelf"; (1) is probably available in a dump of private information somewhere.