Google says hacking tools are likely tied to Spanish firm


An anonymous tipster flagged three software bugs and other details about Heliconia to Google, enabling the company to further investigate, the Threat Analysis Group said. — Reuters

A set of hacking tools that exploited vulnerabilities in Chrome and Firefox web browsers has "likely ties” to a company based in Barcelona, Spain, according to findings published Wednesday by Alphabet Inc’s Google.

Google’s Threat Analysis Group, a cybersecurity unit, said in a blog post that the hacking tools, named Heliconia, are likely tied to the Spanish company Variston IT. In addition to exploiting flaws in Chrome and Firefox browsers, the tools could also target vulnerabilities in Microsoft Corp’s security product Defender, according to Google. Heliconia "provides all the tools necessary to deploy a payload to a target device,” Google said.

The flaws have been fixed, but Google researchers believe they were exploited by hackers before they were patched.

In an emailed statement, Variston declined to discuss specific products or customers. Variston works within "the relevant international and national legal framework,” said Ralf Wegener, director at Variston.

An anonymous tipster flagged three software bugs and other details about Heliconia to Google, enabling the company to further investigate, the Threat Analysis Group said.

Google in June said it had been tracking more than 30 firms with "varying levels of sophistication and public exposure” that sold software exploits or surveillance capabilities. The Threat Analysis Group’s research "has shown the proliferation of commercial spyware and the extent to which commercial spyware vendors have developed capabilities that were previously only available to governments with deep pockets and technical expertise,” the company said in a blog post. – Bloomberg

Article type: free
User access status:
Subscribe now to our Premium Plan for an ad-free and unlimited reading experience!
   

Next In Tech News

Charting a new course with the country's data
Opinion: Teens carry a threat to mental health in their pockets
Like Terminator’s T-1000, this robot liquefies before returning to its original form
This app offers travellers on the London Underground less-polluted routes
Find out if your personal data has fallen into the wrong hands online
FTX founder Bankman-Fried objects to tighter bail, says prosecutors 'sandbagged' him
As they enter a 4th generation, are foldable phones finally mature?
This free tool lets you extract text from images
Google Stadia is dead, but its controllers live on
Twitter says users will be able to appeal account suspension

Others Also Read