Summary:
A UAE-based startup, Advanced Security Solutions, is offering up to $20 million for zero-day exploits to hack smartphones via text messages.
Bounties range from $1 million to $20 million for various operating systems and apps, targeting government and intelligence clients.
The company is anonymous, with no disclosed ownership or ethical guidelines, raising concerns among security experts.
The zero-day market has expanded, with prices increasing due to higher demand and improved security measures by tech companies.
This reflects a growing trend where cybersecurity vulnerabilities are commodified for high stakes in global surveillance and law enforcement.
Advanced Security Solutions: A New Player in the High-Stakes Zero-Day Market
A new startup based in the United Arab Emirates, Advanced Security Solutions, is making waves by offering up to $20 million for hacking tools that can break into any smartphone using just a text message. Launched this month, the company is setting some of the highest public prices in the zero-day exploit market.
Zero-days are software vulnerabilities unknown to developers at the time of discovery, making them highly valuable for hackers, especially those working with government agencies. The bounty breakdown includes $20 million for any mobile OS, $15 million for Android and iPhone exploits, $10 million for Windows, $5 million for Chrome, and $1 million for browsers like Safari and Edge.
Image: A screenshot of the bounties offered by Advanced Security Solutions for zero-days in operating systems.
The company claims to empower government agencies, intelligence services, and law enforcement in digital operations, with over 25 governments as clients. However, its ownership and funding remain undisclosed, raising ethical concerns. A security researcher noted that while the prices are market-aligned, dealing with an anonymous entity is risky.
The zero-day market has grown significantly over the past decade, with prices soaring due to increased demand and improved cybersecurity by tech firms. Competitors like Zerodium and Crowdfense have previously offered lower bounties, but recent trends show values reaching up to $7 million for iPhone exploits. Advanced Security Solutions also offers $2 million for exploits in messaging apps like WhatsApp, Signal, and Telegram.
This development highlights the ongoing tension between cybersecurity advancements and the lucrative trade in vulnerabilities, with implications for privacy and global security.
Comments