links.libroot.org

"Intellexa’s Predator relies, almost exclusively, on so-called “1-click” attacks to infect a device, which require a malicious link to be opened in the target’s phone. The malicious link then loads a browser exploit for Chrome (on Android) or Safari (on iOS) to gain initial access to the device and download the full spyware payload. Company marketing material (see Figure 1) shows the extensive data available once the spyware is installed, including ability to access encrypted instant messaging apps like Signal and WhatsApp, audio recordings, emails, device locations, screenshots and camera photos, stored passwords, contacts and call logs, and also to activate the device’s microphone."

"Intellexa has developed a new strategic infection vector, ‘Aladdin’, which could enable silent zero-click infection of target devices anywhere in the world." ... "The Aladdin system infects the target’s phone by forcing a malicious advertisement created by the attacker to be shown on the target’s phone. This malicious ad could be served on any website which displays ads, such as a trusted news website or mobile app, and would appear like any other ad that the target is likely to see. Internal company materials explain that simply viewing the advertisement is enough to trigger the infection on the target’s device, without any need to click on the advertisement itself."

"By our count, there are a little more than 240 motherboard models impacted"
"Products from other enterprise device vendors are also impacted"
"[...]many of the affected devices have reached end-of-life status, meaning they will likely remain vulnerable indefinitely."

Appelbaum's thesis represents over a decade of insider research, journalistic exposure, and technical analysis into global surveillance. This work directly aligns with Libroot's objectives to expose, resist, and dismantle oppressive digital infrastructures, while also emphasizing the importance of spreading knowledge, fostering public understanding, and developing concrete tools for action. Rightfully earns the first link index.