Google: Protecting Android users from 0-Day attacks

ThisGoogle blog entry looks at some zero-day Android exploits that weredetected and makes it clear what the stakes are.

We assess with high confidence that these exploits were packaged bya single commercial surveillance company, Cytrox, and sold todifferent government-backed actors who used them in at least thethree campaigns discussed below. Consistent with findings fromCitizenLab, we assess likely government-backed actors purchasingthese exploits are operating (at least) in Egypt, Armenia, Greece,Madagascar, Cote d'Ivoire, Serbia, Spain and Indonesia.