Definition
A compromised or malicious page, or a hidden frame that page loads, exploits a flaw in the browser, a plugin, or another program on the device. The payload is fetched and executed as the page renders. Some campaigns also show a fake update prompt and use the click as the install. The visit is what starts it. A zero-click exploit is the form that runs when a device parses a message before anyone opens it.
Relevance
A studio site, a WebGL host, or a documentation page is enough. Players and staff who only open that page can receive a payload aimed at the browser they are using. Updating the browser and the operating system closes the flaws a drive-by looks for.
Example
An employee opens the industry news site the studio reads every morning. The page loads a hidden frame. The frame hits a flaw in an old browser build and runs a downloader. The employee never clicks a download.
Connected
Synonyms
Drive-by