Pegasus USES zero-day exploit chain
Pegasus used a chain of previously unknown exploits against mobile devices.
Explicit Confidence 98% · John Scott-Railton EP 100 Details
“it’s using this chain of zero-days”
Exploit
exploit:zero_day_exploit_chain
Also: chain of zero-days, exploit chain
Multi-stage chain of previously unknown exploits used to compromise fully patched iPhones with Pegasus.
Multi-stage chain of previously unknown exploits used to compromise fully patched iPhones with Pegasus.
“It’s super sophisticated, it’s got all these capabilities, it’s pretty stealthy, and it’s using this chain of zero-days.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | WebKit | Explicit | 100 |
| outgoing | AFFECTS | iPhone | Explicit | 100 |
| incoming | USES | Pegasus | Explicit | 100 |
Pegasus USES zero-day exploit chain
Pegasus used a chain of previously unknown exploits against mobile devices.
Explicit Confidence 98% · John Scott-Railton EP 100 Details
“it’s using this chain of zero-days”
zero-day exploit chain AFFECTS WebKit
The first stage of the exploit chain targeted a bug in WebKit.
Explicit Confidence 98% · Jack Rhysider EP 100 Details
“That JavaScript program tries to exploit a bug in WebKit”
zero-day exploit chain AFFECTS iPhone
The exploit chain was used against fully patched iPhones and included kernel exploits that enabled jailbreaking.
Explicit Confidence 97% · Jack Rhysider EP 100 Details
“this worked with iPhones which were fully patched”