Malwarecritical
Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-4344 | Memory Corruption Flaw in Apple iOS, macOS, tvOS, and watchOS (Pre-2018 Releases) | 7.8 | 2% | KEV | KEV |
| CVE-2019-8605 | Use-After-Free in Apple iOS, macOS, tvOS, watchOS Enables Privileged Code Execution | 7.8 | 18% | KEV | KEV |
| CVE-2020-3837 | Memory Corruption in Apple iOS, macOS, tvOS, watchOS Enables Kernel-Level Code Execution | 7.8 | 15% | KEV | KEV |
| CVE-2020-9907 | Memory Corruption with Kernel Privileges in Apple iOS, iPadOS, and tvOS | 7.8 | 3% | KEV | KEV |
| CVE-2021-30883 | Kernel Memory Corruption Zero-Day in Apple iOS, iPadOS, macOS, tvOS, watchOS | 7.8 | 15% | KEV | KEV |
| CVE-2021-30983 | Kernel Buffer Overflow in Apple iOS and iPadOS Enables Arbitrary Code Execution | 7.8 | 3% | KEV | KEV |
From the original article
5 min read at thehackernews.com
A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android users of infected devices.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.