Hacking Team: 0-day vulnerability Market

Hacking Team: 0-day vulnerability Market

Vglad Tsyrklevich shared an article on the Hacking Team's leaked information about 0-day vulnerability exploits in the transaction market. 0-day vulnerability transactions are not widely known, there have also been related reports earlier, but the leaked information of HT is more comprehensive. vglad has analyzed from multiple dimensions. First, players in the 0-day market have freelancers like Vitaliy Toropov, professional Digital weapons dealers and security companies like VUPEN, the prices for exploits of different vulnerabilities are also composed of many factors, including the quality of exploits and the scope of versions that can be targeted at targets, it also includes whether the vulnerability is "exclusive". If you purchase the "exclusive" vulnerability, the seller will not sell it to other customers theoretically (of course, the seller may violate regulations ), however, the price of "exclusive" weapons is more expensive. A common non-"exclusive" Adobe Flash vulnerability can be exploited at around USD, the "exclusive" version is at least three times the price.

This analysis reveals the tip of the iceberg in the digital arms market. Your enemies may be using these weapons. Should you do something as a defender?

This article permanently updates the link address: