New Exploit Broker on the Scene Pays Premium for Signal App Zero-Days
In our series of letters from African journalists, film-maker and columnist Ahmed Rashid looks at the role gray-market exploit brokers play in the cybersecurity world.
Gray-market exploit brokers are alive and kicking, with the latest sign of this flourishing market coming in the form of a bidding war for Signal messaging app zero-days from a relatively new entrant. Russia-based OpZero went on the record recently with a $1.5 million offer for Signal remote code execution (RCE) exploits, more than tripling the relatively stable high-water mark for that app offered by American firm Zerodium. The arrangements put this market in a swampy middle ground between the vendor-oriented, highly structured vulnerability bug-bounty market and the chaotic and overtly criminal dealings of the Dark Web, dominated by black hats.
Source read time: 2 min - darkreading.com
Also offered in: Nederlands