what is a zero day attack 
a zero day attack also referred to as day zero is an attack that exploits a potentially serious software security weakness that the vendor or developer may be unaware of 1 the software developer must rush to resolve the weakness as soon as it is discovered in order to limit the threat to software users the solution is called a software patch zero day attacks can also be used to attack the internet of things iot a zero day attack gets its name from the number of days the software developer has known about the problem understanding a zero day attacka zero day attack can involve malware adware spyware or unauthorized access to user information users can protect themselves against zero day attacks by setting their software including operating systems antivirus software and internet browsers to update automatically and by promptly installing any recommended updates outside of regularly scheduled updates that being said having updated antivirus software will not necessarily protect a user from a zero day attack because until the software vulnerability is publicly known the antivirus software may not have a way to detect it host intrusion prevention systems also help to protect against zero day attacks by preventing and defending against intrusions and protecting data think of a zero day vulnerability as an unlocked car door that the owner thinks is locked but a thief discovers is unlocked the thief can get in undetected and steal things from the car owner s glove compartment or trunk that may not be noticed until days later when the damage is already done and the thief is long gone while zero day vulnerabilities are known for being exploited by criminal hackers they can also be exploited by government security agencies who want to use them for surveillance or attacks in fact there is so much demand for zero day vulnerabilities from government security agencies that they help to drive the market for buying and selling information about these vulnerabilities and how to exploit them zero day exploits may be disclosed publicly disclosed only to the software vendor or sold to a third party if they are sold they can be sold with or without exclusive rights the best solution to a security flaw from the perspective of the software company responsible for it is for an ethical hacker or white hat to privately disclose the flaw to the company so it can be fixed before criminal hackers discover it but in some cases more than one party must address the vulnerability to fully resolve it so a complete private disclosure may be impossible markets for zero day attacksin the dark market for zero day information criminal hackers exchange details about how to break through vulnerable software to steal valuable information in the gray market researchers and companies sell information to militaries intelligence agencies and law enforcement in the white market companies pay white hat hackers or security researchers to detect and disclose software vulnerabilities to developers so they can fix problems before criminal hackers can find them depending on the buyer the seller and the usefulness zero day information might be worth a few thousand to several hundred thousand dollars making it a potentially lucrative market to participate in 2 before a transaction can be completed the seller should provide a proof of concept poc to confirm the zero day exploit s existence for those who want to exchange zero day information undetected the tor network allows for zero day transactions to be conducted anonymously using bitcoin zero day attacks may sometimes be less of a threat than they sound governments may have easier ways to spy on their citizens and zero days may not be the most effective way to exploit businesses or individuals an attack must be deployed strategically and without the target s knowledge to have maximum effect unleashing a zero day attack on millions of computers at once could reveal the vulnerability s existence and get a patch released too quickly for the attackers to accomplish their ultimate goal real world examplesin april 2017 microsoft was made aware of a zero day attack on its microsoft word software the attackers used a malware called dridex banker trojan to exploit a vulnerable and unpatched version of the software 3 the trojan allowed the attackers to embed malicious code in word documents which automatically got triggered when the documents were opened the attack was discovered by antivirus vendor mcafee which notified microsoft of its compromised software although the zero day attack was unearthed in april millions of users had already been targeted since january in a more recent example google s chrome web browser has been subject to several attack vectors and exploits in 2022 alone google urged chrome users to update their browsers on no less than four separate occasions citing a series of zero day attacks 4