Who needs a 0-click when you have MITM? ✨ Working with @billmarczak & @citizenlab we discovered 3 iOS and 1 Chrome 0-day from Intellexa, used to install Predator spyware in Egypt 🇪🇬
https://t.co/5KF5v4xEnr
Stories from the tranches (our SOC, an MSSP):
SOC to client: Through EDR telemetry, we found out that you have a Word file named "passwords.docx" on a public network share. We recommend moving the passwords to a secure password manager.
Client: Thanks, we renamed the file.