Samsung will pay you over Rs 8 crore if you can crack this ‘vault’ in Galaxy phones: Details here

news7g3 weeks ago

0 1 minute read

Samsung will pay you over Rs 8 crore if you can crack this 'vault' in Galaxy phones: Details here

SAMSUNG is offering a massive reward of up to $1 million (over Rs 8 crore) to anyone who can hack into the Knox Vault found in Galaxy devices. There are also other bounties available for vulnerabilities in platforms like TEEGRIS OS and Rich OS. This bug bounty is part of the Samsung Mobile Security division’s Critical Scenario Vulnerability Program. Samsung is running this initiative to identify “critical attack scenarios” that could impact its products, such as its Galaxy S and Z series smartphones.

When announcing the program, Samsung stated that if someone can find vulnerabilities related to “Arbitrary Code Execution” on high-privileged targets, Unlocking devices, Extracting entire user data, Installing arbitrary applications, or Bypassing device protection solutions, they will be rewarded up to $1,000,000 and that is the maximum amount Samsung pays out for this program.

What is Samsung’s request?

If you want to earn the full $1 million, you must bypass the Samsung Knox Vault and submit a report proving your attempt was a zero-click arbitrary code execution. Samsung will only pay the full amount if the report meets the following conditions:

Reward criteria for Good Report.
Includes a constructible vulnerability that successfully targets one or more of the identified Critical Scenarios.
This vulnerability may work on the latest Security Update of the latest flagship devices (Galaxy S and Z series).
Mining must be performed without privileges.

Samsung’s History with Bug Bounty

Samsung is known for its emphasis on the security of its devices, which is why it has been paying out bounties for almost 6-7 years. The South Korean giant has paid out around $5 million to people who can identify bugs. However, there are multiple bounties offered, each with a different set of conditions to ensure the highest reward. You can check out Samsung’s blog post This for all the details and requirements you need to meet.