A threat actor has claimed to be selling a powerful zero-day exploit targeting Android devices, with the exploit allegedly capable of remote code execution (RCE) via MMS. According to the actor, the exploit is a “ZeroClick” attack, meaning no user interaction is required for the attacker to gain control over the device.
The exploit allegedly affects Android versions 11, 12, 13, and the recently released Android 14, making it a threat across a wide range of phones, regardless of brand or model. The actor claims the exploit chain provides full control over the targeted devices and is selling the framework for $800,000.
Potential buyers are asked to contact the threat actor via Telegram, where more details and proof of concept (PoC) can be shared. The exploit, if real, could be devastating, allowing attackers to remotely control devices and potentially access sensitive personal information without the user ever realizing they were compromised.
