@DaveMWilburn@infosec.exchange
2026-10-15 13:30 UTC
@zackwhittaker@mastodon.social
Thanks for linking to the @citizenlab@mastodon.social report!
Am I correct that no one seems to know (or admit to knowing) what vulnerabilities are being exploited in these 0-click attacks, and there's no fix except installing ad blockers?
Replies (2)
-
@zackwhittaker@mastodon.social 2026-10-15 14:18
@DaveMWilburn@infosec.exchange that's pretty much it; ad block all the things in any and every way possible -- use a multilayered approach.
-
@dirtside@phpc.social 2026-10-17 18:22
@DaveMWilburn@infosec.exchange @zackwhittaker@mastodon.social @citizenlab@mastodon.social as far as I've been able to find, the ad surveillance system via browser is used to *activate* preexisting malware on the machine. Eg you already have some malicious DLL or something, and (somehow) code sent to the browser activates that. The "novel" part is using ad surveillance to identify specific individuals so you can decide whether to send the "trigger malware" JS in the response.