I’m a little confused how mobile ad targeting ends up as a DLL hijack?

woodruffw 7 hours ago | parent | next [-]

This was my first question as well. There’s a big gap between “ad network delivers JS” and a zero-click browser exploit. CitizenLab has done some great research including OSINT on the former, but there’s a conspicuous gap between it and the DLL ending up on the victim’s machine.

▲

nielsbot 8 hours ago | parent | prev | next [-]

mobile ads can deliver JS-based exploits

▲

saagarjha 7 hours ago | parent [-]

But how do the DLLs hack you

	▲	Terr_ 12 minutes ago \| parent \| next [-]
		It reads to me that the DLL is something they found later while trying to determine what the attacker was doing after they were already in.
	▲	dwattttt 7 hours ago \| parent \| prev [-]
		[flagged]

▲

ActorNightly 6 hours ago | parent | prev [-]

There are mentions of CVEs in that article with Chrome exploits.