logoalt Hacker News

kuroguroyesterday at 12:09 PM3 repliesview on HN

Likely referencing https://www.crowdfense.com/exploit-acquisition-program/

Zerodium used to offer up to 300k in 2021 https://www.securityweek.com/sites/default/files/images/Zero...

These brokers usually don't pay the bulk sum - they sell access to nation actors and you get payed out over time as long as the bug is not patched to discourage reselling and burning it. I doubt anyone would confirm if they got the full payment or not for something similar.


Replies

binkyesterday at 12:46 PM

I work in the field and I just cannot believe anyone would pay that much for a Word Press exploit. People pay money for iOS or Android because there is valuable information stored on devices running those operating systems. There's absolutely nothing of value on any Word Press site. The only possible reason I can think of is for a watering hole attack, but that would require a second exploit that would be worth far more (and they aren't).

show 6 replies
tptacekyesterday at 12:24 PM

Zerodium is not real.

show 3 replies
Hizonneryesterday at 12:34 PM

Why would anybody trust criminals to pay them over time?

show 1 reply