Security News > 2021 > January > Google exposes malicious exploits targeting Windows and Android users
Now patched, the exploits took advantage of bugs in Windows, Chrome, and older versions of Android though watering hole attacks, says Google.
In a series of blog posts published Tuesday, Google revealed that it discovered two malicious servers set to deliver different exploit campaigns through watering hole attacks.
One server caught by Google targeted Windows users, while the other server was aimed at Android users.
The exploits for Chrome and Windows included zero-day vulnerabilities, while the one for Android took advantage of n-day vulnerabilities.
Two sandbox escape exploits abusing three zero-day vulnerabilities in Windows.
A "Privilege escalation kit" composed of publicly known n-day exploits for older versions of Android.
News URL
Related news
- Outdated Google Workspace Sync blocks Windows 11 24H2 upgrades (source)
- New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools (source)
- LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers (source)
- Security pros baited with fake Windows LDAP exploit traps (source)
- Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices (source)
- Windows 11's Start menu is getting iPhone and Android integration (source)
- Google blocked 2.36 million risky Android apps from Play Store in 2024 (source)
- Google Bans 158,000 Malicious Android App Developer Accounts in 2024 (source)