Exploit
exploit:zero_click_exploit
Exploit against WhatsApp users that could compromise a phone without the user clicking a link or taking an action.
Exploit against WhatsApp users that could compromise a phone without the user clicking a link or taking an action.
“a zero-click exploit against WhatsApp users”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | Explicit | 100 | |
| incoming | USES | Pegasus | Explicit | 100 |
zero-click exploit AFFECTS WhatsApp
Citizen Lab found a zero-click exploit targeting WhatsApp users, after which WhatsApp patched the application.
Explicit Confidence 98% · John Scott-Railton EP 100 Details
“he was targeted with what we now know to have been a zero-click exploit against WhatsApp users”
Pegasus USES zero-click exploit
The episode says NSO sold a zero-click WhatsApp exploit to customers as a way to deploy Pegasus without requiring the victim to click.
Explicit Confidence 96% · Jack Rhysider EP 100 Details
“NSO was in fact selling this exploit to its customers”