Threat Actor: Unknown | Unknown
Victim: Android users | Android users
Price: $5,000,000
Exfiltrated Data Type: Complete control over the targeted device
Additional Information :
- The exploit is a zero-click type, requiring no interaction from the target to execute.
- It supports Android versions 11, 12, 13, and 14, posing a significant risk to a wide range of devices.
- The exploit can silently take control of devices without user awareness.
- A proof of concept (PoC) is available to demonstrate its capabilities.
- The exploit is being sold for $5 million.
- This highlights the importance of staying vigilant and keeping devices updated with the latest security patches.
A threat actor has announced the sale of a highly sophisticated Android Remote Code Execution (RCE) exploit. The exploit is purportedly a zero-click type, meaning it requires no interaction from the target to execute, significantly increasing its potential threat.
The details of the announcement are as follows:
Exploit Type: Zero-click
Price: $5,000,000
Payload Delivery Method: MMS
Capabilities: Complete control over the targeted device
The exploit is claimed to support Android versions 11, 12, 13, and 14, and is purportedly effective on all Android phones. This broad compatibility suggests a significant risk to a wide range of devices.
In the announcement, the threat actor highlights the ease of the attack, emphasizing the zero-click nature of the exploit, which does not require the target to interact with the payload in any way. This makes the exploit particularly dangerous as it can silently take control of devices without user awareness.
The threat actor has made the exploit available for sale, sharing a proof of concept (PoC) to demonstrate its capabilities. The asking price for this powerful exploit is set at $5 million.
This development underscores the ongoing threats in the cybersecurity landscape, particularly for mobile devices. It highlights the importance of staying vigilant and ensuring that devices are updated with the latest security patches to mitigate such vulnerabilities.
Original Source: https://dailydarkweb.net/threat-actor-claims-to-sell-android-rce-exploit-for-5-million/