Malwarecritical

Cytrox's Predator Spyware Targeted Android Users with Zero

The Hacker Newsby @TheHackersNewsMay 21, 2022 · 03:11 UTC (May 21, 2022)3 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-37973 CVE-2021-37976 CVE-2021-38000 CVE-2021-38003 CVE-2021-1048

Tags: cve-2021-37973 cve-2021-37976 cve-2021-38000 cve-2021-38003 cve-2021-1048 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-1048	Use-After-Free Privilege Escalation in Android Kernel (CVE-2021-1048)	7.8	1%	KEV	Dec 15, 2021 KEV May 23, 2022
CVE-2021-37973	Use-After-Free Sandbox Escape in Google Chrome/Chromium Portals	9.6	12%	KEV	Oct 8, 2021 KEV Nov 3, 2021
CVE-2021-37976	Information Disclosure in Google Chrome/Chromium Memory Implementation (CVE-2021-37976)	6.5	20%	KEVPoC	Oct 8, 2021 KEV Nov 3, 2021
CVE-2021-38000	Improper Input Validation in Google Chrome for Android Allows Forced URL Navigation	6.1	5%	KEVPoC	Nov 23, 2021 KEV Nov 3, 2021
CVE-2021-38003	Memory Corruption in Chromium V8 JSON.stringify Affects Chrome, Edge, Opera	8.8	39%	KEVPoC	Nov 23, 2021 KEV Nov 3, 2021

From the original article

3 min read at thehackernews.com

Google's Threat Analysis Group (TAG) on Thursday pointed fingers at a North Macedonian spyware developer named Cytrox for developing exploits against five zero-day (aka 0-day) flaws, four in Chrome and one in Android, to target Android users.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.