Pwn2Own is a computer hacking contest held annually by Trend Micro’s Zero Day Initiative - ZDI. Contestants are challenged to exploit widely used software and mobile devices with previously unknown vulnerabilities. Winners of the contest receive the device that they exploited and a cash prize. The total prize for each contest is up to millions of dollars.

The 2022 spring edition of Pwn2Own (Pwn2Own Vancouver) was held from 18th March to 20th March 2022 in a hybrid format where participants are back to competing in-person and in virtual due to the ongoing COVID-19 pandemic that has limited some contestants’ traveling operations.

Today, we are proud to announce that our researchers have become the overall winner and won the Master of Pwn.

Billy Jheng Bing-Jhong, Muhammad Alifa Ramdhan, and Nguyễn Hoàng Thạch have successfully Pwned the Oracle VirtualBox in the Virtualization Category.

Daniel Lim Wee Soong, Poh Jia Hao, Li Jiantao & Ngo Wei Lin have successfully Pwned the Microsoft Teams in the Enterprise Communication Category

Phan Thanh Duy and Lê Hữu Quang Linh have successfully Pwned the Microsoft Windows 11 in the Local Escalation of Privilege category

Billy Jheng Bing-Jhong has successfully Pwned the Ubuntu Desktop in the Local Escalation of Privilege category

References