Former hacker Kevin Mitnick has added a new branch to his consultancy business,with a service offering high-end zero-day exploits to corporate and Government clients.
According to Wired, Mitnick says he’s offering exploits developed both by his own in-house researchers and by outside hackers, guaranteed to be exclusive and priced at no less than $100,000 each, including his own fee.
Mitnick declined to name any of his customers, and wouldn’t say how many, if any, exploits his exchange has brokered so far. But the website he launched to reveal the project last week offers to use his company’s “unique positioning among security researchers and the hacker community” to connect exploit developers with “discerning government and corporate buyers.”He said his intended customers aren’t necessarily Governments, but instead, he said that penetration testers and anti-virus firms are potential exploit buyers, and even suggests that companies might pay him for vulnerabilities in their own products.