Exploit OS Vulnerability

Agent Smith exploits known OS vulnerabilities, including Janus, to replace legitimate applications with malicious versions.^[1]

Some original variants of BrainTest had the capability to automatically root some devices, but that behavior was not observed in later samples.^[2]

DoubleAgent has used exploit tools to gain root, such as TowelRoot.^[3]

Dvmap attempts to gain root access by using local exploits.^[4]

Exodus Two attempts to elevate privileges by using a modified version of the DirtyCow exploit.^[5]

FinFisher comes packaged with ExynosAbuse, an Android exploit that can gain root privileges.^[6]

Gooligan executes Android root exploits.^[7]

HummingBad can exploit unfixed vulnerabilities in older Android versions to root victim phones.^[8]

INSOMNIA exploits a WebKit vulnerability to achieve root access on the device.^[9]

Pegasus for Android attempts to exploit well-known Android OS vulnerabilities to escalate privileges.^[10]

Pegasus for iOS exploits iOS vulnerabilities to escalate privileges.^[11]

ShiftyBug is packed with at least eight publicly available exploits that can perform rooting.^[12]

Skygofree has the capability to exploit several known vulnerabilities and escalate privileges.^[13]

SpyDealer uses the commercial rooting app Baidu Easy Root to gain root privilege and maintain persistence on the victim.^[14]

Zen can obtain root access via a rooting trojan in its infection chain.^[15]

Application vetting may be able to identify the presence of exploit code within applications.