A new United Arab Emirates-based startup is offering up to $ 20 million for hacking tools that can help governments break into any smartphone with text messages.
Advanced security solution Launched this month And now it is offering Some of the highest pricesAt least in public, entire zero-day market. Zero-day software has flaws that are unknown to the affected developer at the time of their search. These devices can be highly valuable for hackers, especially working for law enforcement and intelligence agencies.
In addition to the highest prize of $ 20 million, which applies to any mobile operating system, the company also provides reward for exploits in various software: for $ 15 million Android devices for the same type of zero-day and for iphones; $ 10 million for windows; $ 5 million for chrome; $ 1 million for Apple’s safari and microsoft edge browsers, among others.
It is not clear who is behind the company and its customers.
“We empower government agencies, intelligence services and law enforcement to work with accuracy in digital battlefields,” reads the company’s website. “We maintain continuous cooperation with more than 25 governments and intelligence agencies worldwide. Our customers continuously return to new services, reflect trusts and strategic values that we provide in high-day operating contexts, including control of anti-terrorism and drugs.”
The website also states that while the company is new, “this is done by employees especially by professionals with 20 years of operational experience and operating experience in private military contractors.”
Advanced security solutions did not respond to a series of questions, including the money, owner, and run the company, which are customers, as well as the company has any self-logged ethical, or legal restrictions as to what governments have to sell.
Contact us
Do you have more information about advanced safety solutions, or other zero-day providers? From a non-functioning tool, you can safely contact the +1 917 257 1382, or telegram and kebase @Lorenzofb, or email on the signal from Lorenzo francici-bichai. You can also contact techcrunch through Secredrop.
A security researcher, with experience in the zero-day world, told Techcrunch that the prices offered by advanced security solutions are in line with the current market.
“Generally these advertised price is in the ball park,” the person told Techcrunch on the condition of anonymity to talk about the zero-day industry openly. The person said that a reward of $ 20 million “depends on how dishonest you are.”
The researcher also warned that, personally, he would not deal with a company that does not suggest who is behind it, such as in this case. “I don’t think you should sell insects to anyone who is trying to hide them,” he said.
The market has expanded considerably in the last ten years for zero-days, along with the number of companies participating in both, prices have been offered.
In 2015, Zerodium, a broker who also receives zero-day from researchers like advanced security solutions and rescues them governments, was one of the first companies to promote their price list. At that time, the company was founded by veteran exploitation broker outpost Baker Iphones offered up to $ 1 million for the equipment to hackThen, three years later, Crowdfense came Offer $ 3 million For the same type of zero-days.
Recently, zero-day prices have skyrocketed, as it has more demand and also because it is becoming more difficult to hack modern equipment and software, thanks to large tech companies for improving their safety.
Last year, Crowdfs published its new price list, which offered up to $ 7 million to break into iPhones for zero-days, and $ 5 million for the same type of exploits for Android. Customers can buy zero-day for specific apps, especially messaging apps such as WhatsApp (up to $ 8 million), and telegram (up to $ 4 million).
For its share, Advanced Security Solutions says it offers $ 2 million for telegram, signal and WhatsApp zero-days.
The Russian Zero-Day Company Operation was an outsider in the Zero market, offering up to $ 20 million for the same type of feat that is looking for an advanced security solution. Operation Zero is in a unique position because it says it only works with the Russian government, and for many researchers from the US and Europe, Russia is illegal to sell its hacking tools, which means that Operation Zero may have a difficult time to find out what it looks like.
