Company offers up to $500,000 reward for iOS 9.3 zero days

The company Exodus Intelligence has announced an “investigation program” offering rewards for finding zero-day leaks. Such a leak in iOS 9.3 or later is worth up to half a million dollars.

Several products have been mentioned on the Exodus site for which rewards are paid for zero-day leaks. The highest reward is for an as-yet-unknown leak in iOS 9.3 or later, followed by Google Chrome with a maximum payout of $150,000. The announcement is noteworthy, as Apple recently introduced its own rewards program, with the highest payout being $200,000. Then it must be vulnerabilities in components of ‘secure boot firmware’.

Such a high reward for an iOS leak is not new, the company Zerodium has been offering an amount of $ 500,000 for some time, in this case for a remote jailbreak of iOS. In 2015, the company offered $1 million for a short period of time to anyone who could find an exclusive browser-executable and untethered jailbreak. At the time, however, there were no parties that could produce such a vulnerability.

Exodus can then offer the vulnerabilities purchased through the program to third parties, for example other companies or governments, for a fee.