This was my first question as well. There’s a big gap between “ad network delivers JS” and a zero-click browser exploit. CitizenLab has done some great research including OSINT on the former, but there’s a conspicuous gap between it and the DLL ending up on the victim’s machine.
replymobile ads can deliver JS-based exploits
replyBut how do the DLLs hack you
replyIt reads to me that the DLL is something they found later while trying to determine what the attacker was doing after they were already in.
replySure, but it's a mobile ad, how is a DLL going to do anything
reply[flagged]
replyThere are mentions of CVEs in that article with Chrome exploits.
reply