Experience Report on the Challenges and Opportunities in Securing Smartphones Against Zero-Click Attacks. (arXiv:2211.03015v1 [cs.CR])

Zero-click attacks require no user interaction and typically exploit zero-day
(i.e., unpatched) vulnerabilities in instant chat applications (such as
WhatsApp and iMessage) to gain root access to the victim's smartphone and
exfiltrate sensitive data. In this paper, we report our experiences in
attempting to secure smartphones against zero-click attacks. We approached the
problem by first enumerating several properties we believed were necessary to
prevent zero-click attacks against smartphones. Then, we created a security
design that satisfies all the identified properties, …

attacks challenges experience report smartphones zero-click