Archive — US — techcrunch
Russian zero-day seller is offering up to $4 million for Telegram exploits
Operation Zero, a Russian company selling zero-day exploits, is offering up to $4 million for vulnerabilities in Telegram. They are targeting various exploit types including one-click and zero-click remote code execution. The move reflects the Russian government's interests, particularly in exploiting Telegram's popularity amidst heightened cybersecurity concerns in the region.
Key points
- Operation Zero is looking for Telegram exploits, offering $500,000 for one-click RCE, $1.5 million for zero-click RCE, and $4 million for a full chain exploit.
- The high payouts indicate demand from the Russian government, suggesting a strategic focus on Telegram due to its use in both Russia and Ukraine.
- Zero-day vulnerabilities are particularly valuable as they are unknown to software makers, allowing for undisrupted exploitation.
- Security experts warn that Telegram lacks robust privacy measures compared to competitors, raising concerns regarding its safety from malicious attacks.
- The pricing for Telegram exploits may indicate future profit from reselling these vulnerabilities to the government at higher rates.
Why it matters
- The rise in zero-day vulnerabilities coincides with global cybersecurity conflicts, emphasizing the importance of secure messaging systems.
- The Russian government's interest in Telegram exploits reflects ongoing tensions in the region and concerns over cybersecurity, aligning with trends of increased cyber warfare.
- The zero-day market has shown rising prices, mirroring a broader trend in IT where the demand for and value of exploits is rapidly escalating due to increasing sophistication in software defenses.
The announcement by Operation Zero underscores the critical intersection of cybersecurity, government interests, and messaging privacy, as exploit prices soar, indicating a volatile zero-day market influenced by geopolitical pressures.