Sophisticated Android and Windows Hacks Reveal Zero-Day Trove

Google researchers have disclosed a significant hacking effort that began in early 2020 and targeted Windows and Android systems with a succession of sophisticated assaults, some of which used zero-day vulnerability. Researchers from Google Project Zero and the Google Threat Analysis Group (TAG) collaborated to discover the assaults, which were "executed by a very skilled actor," according to Ryan of Project Zero in the first of a six-part blog post on their findings.The team spent months investigating the assaults, including looking into what happened on Android devices once they were exploited. Additional payloads were supplied in that scenario, including device fingerprinting data, location data, a list of active processes, and a list of loaded apps for the phone. The researchers published root-cause investigations for each of the four Windows zero-day vulnerabilities they found used in their attacks. Read More