Project Zero Details Hacking Operation Targeting Android and Windows

Summary

Google’s Project Zero recently detailed in a series of blog posts a hacking operation that was first detected in early 2020 targeting Android and Windows devices via two exploit servers, exploit chains, and watering hole attacks. To gain access to the targeted devices, the threat actors exploited vulnerabilities in Google Chrome and subsequently used additional exploits to establish further control. Project Zero detailed the hacking operations as sophisticated and well-engineered, with novel exploitation methods and post-exploitation techniques.

Recommendations

The NJCCIC recommends reviewing the ZDNet article and Project Zero blog posts for additional details and information to help cybersecurity defenders in identifying these and similar attacks.