This Map Shows the Global Spread of Zero-Day Hacking Techniques

guest · Apr 6, 2020

This Map Shows the Global Spread of Zero-Day Hacking Techniques
The collection of countries using those secret hacking techniques has expanded far beyond the usual suspects
April 6, 2020
https://www.wired.com/story/zero-day-hacking-map-countries/amp

So-called zero-day exploits—hacking techniques that take advantage of secret software flaws—were once the calling card of only the most sophisticated hackers. But today, the global map of zero-day hacking has expanded far beyond the United States, Russia, and China, as more countries than ever buy themselves a spot on it.

Security and intelligence firm FireEye today released a sweeping analysis of how zero days have been exploited worldwide over the last seven years, drawing in data from other security research organizations' reporting as well as Google Project Zero's database of active zero days. FireEye was able to link the use of 55 of those secret hacking techniques to state-sponsored operations, going so far as to name which country's government it believes to be responsible in each case.
Click to expand...

Incomplete as it may be, FireEye's data nonetheless point to a disturbing trend: Powerful hacking tools are proliferating. As hacking contractors continue to expand their customer base, expect more flags to show up in more places on the zero day map.
Click to expand...

guest · Apr 6, 2020

Zero-Day Exploitation Increasingly Demonstrates Access to Money, Rather than Skill — Intelligence for Vulnerability Management, Part One
April 6, 2020
https://www.fireeye.com/blog/threat...n-demonstrates-access-to-money-not-skill.html

FireEye Mandiant Threat Intelligence documented more zero-days exploited in 2019 than any of the previous three years. While not every instance of zero-day exploitation can be attributed to a tracked group, we noted that a wider range of tracked actors appear to have gained access to these capabilities.

Additionally, we observed an increase in zero-days leveraged against targets in the Middle East, and/or by groups with suspected ties to this region. [...]
Conclusion
We surmise that access to zero-day capabilities is becoming increasingly commodified based on the proportion of zero-days exploited in the wild by suspected customers of private companies.

It is likely that state groups will continue to support internal exploit discovery and development; however, the availability of zero-days through private companies may offer a more attractive option than relying on domestic solutions or underground markets.
Click to expand...

Log in or Sign up

This Map Shows the Global Spread of Zero-Day Hacking Techniques

guest Guest

guest Guest

Log in or Sign up

This Map Shows the Global Spread of Zero-Day Hacking Techniques

guest Guest

guest Guest

Useful Searches