3 ms·
The spyware itself is boring as it just collects IP addresses and similar info. What is interesting, on the other hand, is that the payload is delivered through
by mustpax 18y ago
The spyware itself is boring as it just collects IP addresses and similar info. What is interesting, on the other hand, is that the payload is delivered through a single page view. Either FBI is using 0-day exploits or has other "understandings" with OS/Browser vendors. And some systems are more vulnerable than others apparently:
>>> "In these instances, the CIPAV did not deliver its payload because of system incompatibility."
0-day browser exploits are hard to come by, even for the FBI.
- tptacek 18y agoOr they're just using any of a hundred older browser vulnerabilities, and targeting people who haven't patched. Though, for what it's worth, 0-day browser exploits may not be hard to come by for the FBI; government agencies are vulnerability buyers.