![]() ![]() Still, the rewards are far lower than what Zerodium can potentially offer. However, both ExpressVPN and NordVPN offer bug bounties, which means they'll pay you for uncovering vulnerabilities in their software. Zerodium-along with ExpressVPN, NordVPN, and Surfshark-didn’t immediately respond to a request for comment. “Access to acquired zero-day research is highly restricted and is limited to a very small number of government clients.” “At Zerodium we take ethics very seriously and we choose our customers very carefully through a very strict due diligence and vetting process,” the site adds. Those customers include government institutions in the US and Europe “in need of advanced zero-day exploits and cybersecurity capabilities,” according to Zerodium’s website. If you want two years of service, you'll be paying 59.76 for Surfshark, 89 for NordVPN, and 150 (99 for the first 15 months, plus half of 99 for the next 12) for ExpressVPN. The bounty from Zerodium also suggests the company’s clients are looking to spy on some users of the three VPN apps. ![]() However, the zero-day exploits Zerodium is asking for could unravel the encryption and even hijack your PC or smartphone. The technology works by rerouting your internet activity to the VPN provider’s servers and encrypting the connection, which can prevent an internet service provider from learning what you’ve been browsing. But it's also true that hackers and fraudsters rely on VPN services too. Zerodium's tweet is unsettling, given that ExpressVPN, NordVPN, and Surfshark are highly rated and popular VPN services. For now, Zerodium is merely calling on hackers and security researchers to submit “pre-offers” for the zero-day exploits via its website. ExpressVPN recently released a new feature called Threat Manager that stops you from communicating with malicious tracking sites, but it won’t block ads or malware. It blocks annoying ads and warns you if you try to access a malware-ridden site. But its bounties can range from $100,000 up to $2.5 million for the most powerful zero-day exploits against Android and iOS. A key feature of NordVPN that ExpressVPN lacks is its ad and malware blocker called CyberSec. Zerodium didn't say how much it's willing to pay for the hacking techniques. ![]()
0 Comments
Leave a Reply. |