Eli5: How are Zero-click exploits even possible?

907 views

Like if nobody “asks” a piece of software to execute how does it get downloaded to my phone or PC and then execute it self ? I can understand attacks e.g where you download a jpeg and then click to open it and the jpeg had some extra malicious code in it etc, but without anybody “authorizing” anything how does the kernel allow the code to be run by the cpu etc ?

**EDIT** I am talking about forced entry zero click software like the one pegasus created for iphones

In: 190

20 Answers

Anonymous 0 Comments

Really depends.. windows is built to trust everything by default

1) there are built into os on purpose by us government (like wannacry)

2) they use other software updates etc.. your pc already downloads stuff all the time

3) code injection – pc reads text as part of code like acror reading *Romeo runs towards Juliet* out loud instead of acting it .. this was case of log4j

4) many more

You are viewing 1 out of 20 answers, click here to view all answers.