“The first rule of [the] 0-days biz is to never discuss prices publicly,” Bekrar wrote in messages to reporters. “So guess what: We’re going to publish our acquisition price list.” He offered to pay $80,000 for exploits that could defeat Google’s Chrome browser, $100,000 for Android exploits. The top prize, $500,000, was reserved for the iPhone. As the number of Zerodium customers went up, so did Bekrar’s payouts. In 2015 Zerodium tweeted out a $1 million offer for the gold mine: a remote jailbreak of the iPhone, which entailed a chain of zero-day exploits that would enable his government
...more
