4 ms·
Can't find prices for a jailbreak, but a zero click full chain exploit with persistence is $2.5M for Android, $2M for iPhone: https://zerodium.com/images/zerod
by e44858 3y ago
Can't find prices for a jailbreak, but a zero click full chain exploit with persistence is $2.5M for Android, $2M for iPhone:
https://zerodium.com/images/zerodium_prices_mobiles.png https://zerodium.com/images/zerodium_prices_mobiles.png
Seems iPhone exploits got cheaper because they're too abundant:
https://twitter.com/Zerodium/status/1260541578747064326 https://twitter.com/Zerodium/status/1260541578747064326
Apple has released phones with major vulnerabilities hard-coded in the silicon. When the checkra1n jailbreak was released, the only fix was to buy a new phone because it exploited flaws in the bootrom & secure enclave silicon.
https://www.malwarebytes.com/blog/news/2019/09/new-ios-exploit-checkm8-allows-permanent-compromise-of-iphones https://www.malwarebytes.com/blog/news/2019/09/new-ios-explo...
https://checkra.in/news/2020/09/iOS-14-announcement https://checkra.in/news/2020/09/iOS-14-announcement
- goblin89 3y ago(That was in 2020, as of iOS 13 IIRC. It’d be interesting how much of that works against the current iOS 17, and whether Zerodium simply had cashflow issues at the time.)
- e44858 3y agocheckra1n was abandoned, but palera1n seems to use the same vulnerabilities and works with iOS 17. https://en.wikipedia.org/wiki/IOS_jailbreaking#Table_of_tools https://en.wikipedia.org/wiki/IOS_jailbreaking#Table_of_tool...
- goblin89 3y ago17.3, and not a zero-click exploit but a jailbreak tool.