News for hackers. Stuff that matters.

A comment on Firefox zero-day was used in attack against Coinbase employees, not its users. Parent comment

Re:Firefox zero-day was used in attack against Coinbase empl... by ajross on Thursday June 20, 2019 @07:30PM (#20238497)
> How did a privately reported zero-day leak from Bugzilla into an attacker's arsenal?

This was a VERY valuable bug. I mean, it's sad to think about but the most likely scenario is that someone with access to the report at Mozilla or Google (or maybe elsewhere if it was shared more widely) called a friend of a friend of a friend and... sold it.

[ Parent | on HN ]
Re:Firefox zero-day was used in attack against Coinbase empl... by luch on Friday June 21, 2019 @01:47AM (#20240160)
Moreover, people are bad at keeping secrets. Social engineering is clearly a thing, even among infosec circles. Sometimes all it takes is being in the right bar and having a good ear.
[ Parent | on HN ]