A new emerging company, based in the United Arab Emirates, offers up to $ 20 million to penetration tools that can help governments storm any smartphone with a text message.
Advanced security solutions I was launched this month It is now presented Some of the highest pricesAt least in general, in the full market on zero. Zero days are defects in the unknown programs of the affected developer at the time of their discovery. These tools can be of high value for infiltrators, especially those who work in law enforcement and intelligence agencies.
Regardless of the highest bonus of $ 20 million, which applies to any mobile operating system, the company also provides rewards for exploits in different programs: $ 15 million for the same zero type for Android devices and iPhone devices; $ 10 million for Windows; $ 5 million per chrome; One million dollars for Safari and Microsoft Edge browsers, among other things.
It is not clear who is behind the company and its customers.
“We enable government agencies, intelligence services and law enforcement to work carefully in the digital battlefield,” and reads the company’s website. “We maintain continuous cooperation with more than 25 government and intelligence agency around the world. Our customers are constantly returning to new services, which reflects the confidence and strategic value that we provide in high -risk operating contexts, including fighting terrorism and fighting drugs.”
The site also says that although the company is new, “it is operated exclusively by professionals with more than 20 years of experience in elite intelligence units and private military contractors.”
The advanced safety solutions of a series of questions, including from the World Health Organization, have not responded, and the company runs, who are customers, as well as whether the company has any moral or legal restrictions on what it must sell.
Contact us
Do you have more information about advanced safety solutions, or other service providers on the zero day? From a non-action device, you can call Lorenzo Franceschi-bicchierai safely to indicate +1 917 257 1382, or via Telegram and Keybasarezofb, or email. You can also contact Techcrunch via Securedrop.
A security researcher with experience in the world of zero days has told Techcrunch that the prices offered by advanced safety solutions are almost in line with the current market.
“These prices are usually announced in the ball garden,” the person told Techcrunch, provided that his identity is not disclosed to speak frankly about the zero day industry. The person added that the bonus of $ 20 million is “low depending on the inevitable extent.”
The researcher also warned that, personally, he will not deal with a company that does not reveal those behind it, as in this case. “I don’t think you should sell errors to anyone trying to hide who they are,” he said.
The zero days market has expanded significantly in the past ten years, both in terms of the number of companies participating in it, as well as the prices provided.
In 2015, Zerodium, a broker that is very similar to advanced safety solutions, was also zero days of researchers and reselling them to governments, among the first companies whose price list was published. At that time, the company was founded by the veteran exploitation broker, Cocoki Bakrar I offered up to $ 1 million to the tools needed to penetrate iPhone devices. Then, three years later, a collective came Submit 3 million dollars For the same type of zero days.
Recently, the price of zero days has increased, partly due to a higher demand and also because it is difficult to penetrate modern devices and programs, thanks to the large technology companies that improve their security.
Last year, CROUDFENSE published its new price list, which offered up to $ 7 million for zero days to storm iPhone and $ 5 million for the same type Android. Customers can also buy zero days for specific applications, especially messaging applications such as WhatsApp (up to $ 8 million), and telegram (up to $ 4 million).
For its part, Advanced Security Solutions says it provides two million dollars for telegram, signal and WhatsApp Zero.
Russian Day Day Company Zero was strange on the market, providing up to $ 20 million for the same type of exploits that advanced safety solutions are looking for. The Zero process is in a unique position because it says it only works with the Russian government, and for many researchers in the United States and Europe, it is illegal to sell their piracy tools to Russia, which means that the Zero process may face more difficulty in finding what he is looking for.
