Exploit OS Vulnerability

Agent Smith exploits known OS vulnerabilities, including Janus, to replace legitimate applications with malicious versions.^[1]

Some original variants of BrainTest had the capability to automatically root some devices, but that behavior was not observed in later samples.^[2]

Dvmap attempts to gain root access by using local exploits.^[3]

Exodus Two attempts to elevate privileges by using a modified version of the DirtyCow exploit.^[4]

FinFisher comes packaged with ExynosAbuse, an Android exploit that can gain root privileges.^[5]

Gooligan executes Android root exploits.^[6]

HummingBad can exploit unfixed vulnerabilities in older Android versions to root victim phones.^[7]

INSOMNIA exploits a WebKit vulnerability to achieve root access on the device.^[8]

Pegasus for Android attempts to exploit well-known Android OS vulnerabilities to escalate privileges.^[9]

Pegasus for iOS exploits iOS vulnerabilities to escalate privileges.^[10]

ShiftyBug is packed with at least eight publicly available exploits that can perform rooting.^[11]

Skygofree has the capability to exploit several known vulnerabilities and escalate privileges.^[12]

SpyDealer uses the commercial rooting app Baidu Easy Root to gain root privilege and maintain persistence on the victim.^[13]

Zen can obtain root access via a rooting trojan in its infection chain.^[14]

Application vetting may be able to identify the presence of exploit code within applications.