4 ms·
I am curious as to how exactly the spyware got on the victims computers. In the Microsoft blog, they mention a chain of exploits. But it could be interesting to
by hkon 5y ago
I am curious as to how exactly the spyware got on the victims computers. In the Microsoft blog, they mention a chain of exploits. But it could be interesting to understand how they are able to target an individual system with such precision.
- flyinglizard 5y agoThe attacker knows very well who the victim is and probably has all their contact info. From there you can use email or messaging to direct them towards your digital traps.
- Anunayj 5y agoArticle does mention Chrome 0-day Vulnerabilities (CVE-2021-21166 and CVE-2021-30551) and a Office Vulnerability (CVE-2021-33742). Knowing these were targeted attacks, It could have been as easy as sending a innocent looking email with a innocent looking link (something like blacklivesmatters[.]info). That combined with the Windows privilege acceleration attacks, could get the spyware insane amount of access. Considering these individuals (politicians, journalists) probably dealt with a lot of mail everyday, this could easily have gone undetected. This really gives you a perspective on how big this company is, having the resources and incentive to do these exploits instead of reporting it.
- hkon 5y agoYes, incentive wise it increases respect for the ones that do research and report it instead of exploiting it.