Preventing Infections of N-Day Exploits Delivered via Malicious Websites

Google’s Threat Analysis Group observed state-backed attackers and commercial surveillance vendors repeatedly using N-day (known) exploits—delivered via compromised or purpose-built malicious websites—to target mobile devices. TAG published Indicators of Compromise for the malicious sites; the report emphasizes indirect detection challenges on mobile platforms and outlines mitigation capabilities offered by a Mobile Threat Defense solution (malicious web filtering, vulnerability assessment, and tamper monitoring).