Connect with us

News

Google Chrome Exploit Results In Attack On Lebanese Journalists

According to antivirus company Avast, there is evidence that an Israeli spyware firm called Candiru used a vulnerability in Google Chrome to spy on journalists in Lebanon.

Published

on

google chrome exploit results in attack on lebanese journalists

In early July 2022, Google patched a previously unknown vulnerability in its Chrome browser, known as CVE-2022-2294. The zero-day Chrome exploit only came to light after it was apparently used to spy on journalists in Lebanon.

Antivirus company, Avast, collated a report, which it delivered to Google detailing the zero-day exploit. In this report, Avast claims that Israeli spyware firm, Candiru, used the exploit to install spyware on the journalist’s computers.

It equally believes that the firm has used similar exploits to target Avast users in Turkey, Lebanon, Palestine and Yemen beginning in March of this year.

A zero-day exploit is, in short, a vulnerability in a piece of software that is unknown to the developers. They are typically discovered in the wild for this reason, and are known as zero-day because the developers have zero days in which to address the issue. This is because the vulnerability has the potential to cause damage from the moment it is discovered.

Avast alleges that Candiru used the above-mentioned exploit to gain access to user’s computers. It is believed to have compromised a website, which it used to redirect users to a server that could collect their data. If the data – collected on 50 data points such as location, language, time zone, etc. – met their requirements, the server would establish an encrypted channel.

Despite not claiming responsibility, Candiru is the prime suspect in the attack because the CVE-2022-2294 exploit was used to install the DevilsTongue spyware. This is a piece of malware previously linked to the group by Microsoft in a separate string of attacks.

devilstongue exploit

In its report, Avast claims that the zero-day exploit was used alongside another vulnerability capable of bypassing the sandbox security function in Chromium. However, Avast has (as yet) been unable to determine the second exploit used by the alleged attackers.

Also Read: DDoS Attacks Are A Growing Threat In Gaming

Luckily, Google released a patch for the exploit on July 4. As such, there is no need for Chrome users to be concerned, providing browsers are kept up to date. Microsoft and Apple have released patches for their Edge and Safari browsers, too, as they also use WebRTC.

Candiru has not yet been officially connected to the incident, so its involvement is currently (albeit well-informed) speculation. However, the tools used and computers targeted matches its previous spyware attempts dating from 2021 and early 2022. As the company has no public online presence, this fact is unlikely to change anytime soon.

Advertisement

📢 Get Exclusive Monthly Articles, Updates & Tech Tips Right In Your Inbox!

JOIN 16K+ SUBSCRIBERS

News

NEOM Airlines Is Saudi Arabia’s New, Tech-Centric Carrier

The airline will embrace advanced technologies such as artificial intelligence, and utilize high-tech propulsion systems by 2026.

Published

on

neom airlines is saudi arabia's new tech-centric carrier

Opening in 2025, NEOM is a $500 billion Saudi Arabian smart city that will be powered entirely by renewable energy. Now, Saudi authorities have announced that the futuristic metropolis will also be served by its own dedicated carrier — NEOM Airlines.

neom international airport

The service will begin operating in 2024 and embrace advanced technologies, including artificial intelligence and biometric check in. Aircraft will fly to and from NEOM Bay before moving to the soon-to-be-built NEOM International Airport.

Also Read: ChatGPT Is Accelerating The AI Revolution In The Middle East

NEOM Airlines will focus on tourist, commercial, and residential travel and incorporate plenty of cutting-edge technology. Klaus Goersch, the airline’s CEO, revealed that existing aircraft will be retrofitted with existing technology on launch, but by 2026, an ultra-modern fleet will be in operation, “whether electric, hydrogen-powered, or supersonic”.

As well as modern, low-emissions power airplanes, NEOM aircraft will also be fitted with sleek, modern interiors, 6G Wi-Fi, large screens for every seat, plus gaming and chat technology.

Continue Reading

#Trending