Government hackers are leading the use of attributed zero-days, Google says

Hackers working for the governments were responsible for the exploitation of mostly featured zero-days used in real-world cybettacks last year New research from GoogleThe

The number of Google’s report says that Zero-day The exploited-hawkers mentioned the flaws of unknown protection to software makers while abusing them-in 2021, the exploitation of 75 in 2021 was reduced to 75 exploitation in 2021.

Of these 20 exploits, 5 zero days were blamed for hackers working directly for the government, of which five are connected to China and five to five North Korea.

Was identified to be developed by eight more absorption Spyware manufacturers And surveillance enabled, such as NSO groups, which usually only claim to be sold to governments. Google is also calculating these eight absorption made by spyware companies Bug That was that Recently absorbed By Serbian authorities using celebrities phone-unlocking devices.

Despite the fact that there are eight recorded cases of zero-day made by spyware makers, Google’s threat Intelligence Group (GTIG) has told Clement Engineer Clement Likigen Techcunch that these companies are investing more operational security to expose their capacity and finish the news. ”

Google has added that surveillance vendors continue to expand.

GTIG chief analyst James Sadovsky told TechCrunch, “The vendors have taken out the business of law enforcement or public publication, we have seen new vendors raised to provide similar services.” “Unless government customers continue to request and payment for these services, the industry will continue to grow.”

The remaining 5 multiplied zero-day was probably absorbed by cyber criminal, such as the Ransomware operator. The enterprise targets the devicesIncluding VPN and Routers.

The report also showed that most of the 75 zero-day used in 2021 aims at most of the zero-day phones and browsers targeting platforms and products; The rest of the absorbed devices are usually found in corporate networks.

According to Google reports, the good news is that the software manufacturers defended against zero-day attacks are increasingly making manufacturers growing up buggies.

“We see some historically popular goals such as browser and mobile operating system zero-day exploitation of some historically popular goals.”

Sadovsky has specifically indicated Lockdown modeA special feature for iOS and Macos that disables specific functionality with the target of stigmatizing cellphones and computers, which contains proven Track Record Government hackers stop; As well as Memory tagging extension (MTE), modern Google Pixel chipset is a protection feature that helps to detect certain types of bugs and improve device protection.

Reports like Google are because they give art and observers, data points that contribute to our understanding of how the government hackers manage-the underlying challenge, including zero-day counts, is not identified by nature, some of them are identified and some still go without attribution.