anti00te (2)

Google’s Threat Analysis Group (TAG) released an advisory regarding zero-day vulnerabilities in Android, iOS, and Chromium-based browsers that could allow a threat actor to spy on affected devices. Threat actors targeted users via SMS phishing messages. The SMS contained a URL shortener (bit[.]ly) that delivered the exploit and redirected the victim to a spoof Variston website. The payload is a C++ malware containing functions that steal data from messaging platforms and browser applications. Users are encouraged to update their devices’ applications, firmware, and operating systems to prevent further exploitation of unpatched systems.