Receipt for €8M iOS Zero-Day Sale Pops Up on Dark WebReceipt for €8M iOS Zero-Day Sale Pops Up on Dark Web
Documents appear to show that Israeli spyware company Intellexa sold a full suite of services around a zero-day affecting both Android and iOS ecosystems.
![mobile device with screen locked due to security breach mobile device with screen locked due to security breach](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt111c26e8c12adfb1/64f15d0444491b34ebabe5a8/spyware_NicoElNino_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Last month, an unknown customer appears to have shelled out around €8 million for a full-service zero-day remote control execution (RCE) exploit.
Screenshots shared of the zero-day exploit bill of sale are dated July 14 and show that Intellexa, a spyware company, sold a product it called Nova Suite to an unknown buyer. It promised turnkey infections for Android, as well as iOS devices. The paperwork references iOS version 15.4.1 from March, but it's unclear how many devices remain vulnerable.
Intellexa also promised the malware is delivered with just one click and uses the browser to inject the Android and iOS payload to mobile devices. The purchase price also includes data analysis, a "magazine" of 100 other infections, and even a full year's warranty.
About the Author
You May Also Like
Uncovering Threats to Your Mainframe & How to Keep Host Access Secure
Feb 13, 2025Securing the Remote Workforce
Feb 20, 2025Emerging Technologies and Their Impact on CISO Strategies
Feb 25, 2025How CISOs Navigate the Regulatory and Compliance Maze
Feb 26, 2025Where Does Outsourcing Make Sense for Your Organization?
Feb 27, 2025