Google says Spanish spyware vendor exploited zero-day vulnerabilities in Chrome, Firefox and Windows

A Spain-based company that claims to provide tailor-made Information Security Solutions has been linked to three exploitation frameworks. As per Google security researchers, the firm exploited several zero-day vulnerabilities in Microsoft Defender, Chrome and Firefox browsers to plant spyware.

As per a blog post by Google, Barcelona-based Variston IT’s Heliconia framework provided tools necessary to deploy a payload to a target device. Google’s Threat Analysis Group (TAG) says that the affected vulnerabilities in Chrome, Microsoft and Firefox were fixed in 2021 and early 2022.

TAG team notes that it became aware of the Heliconia framework when Google received an anonymous submission mentioning three bugs.