Security News > 2021 > March > Google: Sophisticated APT Group Burned 11 Zero-Days in Mass Spying Operation

Google has added new details on a pair of exploit servers used by a sophisticated threat actor to hit users of Windows, iOS and Android devices.

Malware hunters at Google continue to call attention to a sophisticated APT group that burned through at least 11 zero-days exploits in less than a year to conduct mass spying across a range of platforms and devices.

The group has actively used "Watering hole" attacks to redirect specific targets to a pair of exploit servers delivering malware on Windows, iOS and Android devices.

In a new blog post, Google Project Zero researcher Maddie Stone released additional details on the exploit chains discovered in the wild last October and warned that the latest discovery is tied to a February 2020 campaign that included the use of multiple zero-days.

In all, Stone and the Google Project Zero team snagged one full exploit chain hitting Chrome on Windows, two partial exploit chains targeting fully patched Android devices running Chrome and the Samsung Browser; and remote code-execution exploits for iOS 11 and iOS 13.

Stone's analysis also show the APT group is prolific with the types of vulnerabilities used in exploit chains.

News URL

http://feedproxy.google.com/~r/Securityweek/~3/VzPiRrEJH48/google-sophisticated-apt-group-burned-11-zero-days-mass-spying-operation