Following on from this question about a WiFi OTA vulnerability: assume a popular computing platform has a known vulnerability that would allow creation of a worm with access to ring 0 (kernel). Then, how likely is it / how long would it take before a malicious worm was created that targeted:
- The general population
- A special subset of users, such as workers at a particular organisation such as a hospital
- Specific people of interest, such as politicians or celebrities
I'm interested in both anecdotal accounts and formal studies. I found this paper, but it seems to be behind a paywall. As an aside, what terms would you use to search for this information?
As an example of why I think this threat is real: an exploit might gather the location of all users with an unpatched phone. That has to be worth something to somebody (and so might make it worthwhile to implement).
* as of 14 Apr 2017