The 11 Zero-Day Marketing Exploits
Eleven recurring meta-patterns for engineering an unfair go-to-market advantage.
- Difficulty
- Advanced
- Time to result
- ~weeks to results
- Steps
- 11
- Confidence
- 92%
Across 300-400 case studies, Croll and Ross found 11 tactics ('zero-day marketing exploits') that keep recurring as meta-patterns. You can't copy a specific tactic once it's known (it just becomes marketing), but you can apply the pattern to your own product, medium, and market. This is the catalog you run after adopting the subversive mindset and scanning with the Recon Canvas.
Origin
Distilled by Alistair Croll and Emily Ross from ~160 case studies that made it into 'Just Evil Enough.' Distinguished from generic 'growth hacks,' which are product-agnostic; these exploits are specific to subverting an industry's dynamics.
Core principles
- 01A tactic that works becomes marketing; a tactic that fails or becomes illegal you stop doing; the real skill is finding your own
- 02Growth hacks are product-agnostic (like an exit-intent popup); zero-day exploits are specific to your industry's dynamics
- 03Steal the pattern, never the tactic
How to run it
- 1
Bug into feature
Take a weakness and reframe it as an asset, or recognize it's already an asset for a market you've ignored. Salesforce turned 'we have a very limited feature set' into 'we are simple' (logo: 'No Software').
Pro tip If your product takes forever to configure, prosumers who white-label may already love that; the weakness is a segment cue.
- 2
Buyer upgrade
You're already selling the perfect thing to the wrong person; change the buyer, not the product. Mr. Clean's Magic Eraser was aircraft-insulation foam until people used it to clean stains; a bridge-inspection drone had a 100% close rate once sold to insurers instead of city councils.
Pro tip Sometimes the upgrade is just a different department at the same company (Coradiant sold to marketing instead of operations and landed Fidelity, Salesforce, LinkedIn in three months).
Watch out There's an ego cost: acknowledging a different market wants your product can feel like admitting you were wrong.
- 3
Access
Leverage a resource, person, or price others can't reach. Getaround borrowed a VC's early Tesla Roadster for CES; Whitney Wolfe used sorority/fraternity access to seed Tinder.
Watch out Be honest that privileged access (network, background) is a real and sometimes uncomfortable advantage.
- 4
Bait and switch
Attract with one offer, convert to another, but only ethically: the bait must be free, or you must also deliver what was promised, or the switch must delight them. Tupperware's dinner parties baited social events and switched to an MLM business opportunity.
Watch out This is the tactic most easily done as a con; keep it 'just evil enough' by making the bait free or the switch genuinely wanted.
- 5
Combination
Your product may only be half a solution; combine it with the step just before or after in the value chain. Kraft's powdered cheese didn't sell until a salesman rubber-banded it to a box of macaroni; 1-800-Mattress added old-mattress removal for New Yorkers.
Pro tip Ask 'how is my product actually being used?' and bundle the one adjacent step that simplifies the offer.
- 6
Arbitrage
Know something others don't, sooner or from a better vantage point. Bankers bribed the Chappe optical telegraph operators to learn Paris market moves early; Zynga's FarmVille grew overnight because Zuckerberg told Pincus apps would be allowed to post to timelines.
Watch out There's an evil line here (inducing errors, insider information); stay on the legal side of 'finding out early.'
- 7
Aggregation
Consolidate scattered data from many sources into one structured place, become the default destination, then monetize. Busbud aggregated impossible-to-find bus schedules into millions of structured JSON pages ('catnip' for search engines), then leveraged referral traffic to force bus companies to deal.
Pro tip Well-structured data that isn't available elsewhere makes you the default destination via search.
Watch out Get Satisfaction crossed the line by crawling complaints and extorting brands; don't assume consent.
- 8
Reframing
Don't compete on existing dimensions; draw a new grid. Tom's of Maine added a 'natural/unfluoridated' axis orthogonal to Colgate's sexy-breath and Crest's clinical axes, winning the hippie segment.
Pro tip A dimension only matters if a lucrative, reachable segment thinks it's the dominant criterion for choosing.
Watch out Reframing wins with a disagreeing segment, not the whole market; in established RFP-driven B2B, position against competitors instead.
- 9
Regulation
Change or exploit the rules; regulatory change is a viable, overlooked strategy. Austria's opt-out organ donation yields 99.6% vs Germany's opt-in 12% (identical populations); parklet activists exploited 'it just has to be a car' loopholes.
Pro tip No growth hack moves you from 12% to 99.6%; sometimes the leverage is the regulation itself.
- 10
Misappropriation
Repurpose an existing system for something its owner never intended. Netflix turned the US Postal Service into a high-latency, high-bandwidth video-delivery network.
- 11
Sliding the window
Exploit the Overton window: a segment may already accept something the mainstream doesn't. Body Form was first to use red liquid in feminine-hygiene ads (once literally banned), and that segment respected them for saying the quiet part out loud.
Pro tip A female co-author (Emily Ross) surfaced Overton-window openings most marketing conversations miss.
In the wild
LP Maurice couldn't get bus schedules while traveling South America, so he crowdsourced them, auto-generated millions of well-structured JSON pages (needing three Google Analytics accounts to handle the volume), became the search default, put a 'buy ticket' button routing traffic to bus companies, then told those companies '20% of your traffic comes from me, we should talk.'
→ Turned an unsexy, unavailable dataset into the default destination and forced reluctant bus companies to the table.
Common mistakes
Copying a known tactic
Once an exploit (invite-for-reward, Dropbox referral storage) is known it's just marketing; the value is in finding your own pattern application.
Assuming your target market is fixed
Founders stay stuck on the original buyer and never test whether a different market or department already loves the product as-is (the buyer-upgrade miss).
Is it for you?
Best for
Founders and product marketers generating a set of candidate go-to-market moves for a product that isn't breaking through.
Not ideal for
Regulated or trust-critical categories where any 'just evil enough' move risks assuming consent, punching down, or legal exposure.
From the transcript
“turning bugs into features upgrading buyer upgrade access bait and switch combination uh Arbitrage aggregation reframing and regulation”
“buyer upgrade is where you are already selling the perfect thing you're just selling to the wrong person”
“misappropriation with Netflix misappropriating the US Postal Service and then the last one is sliding the window”
“we like the term zero day marketing exploits”
“so you can't steal the tactic but you can apply that tactic”
From the episode
Just evil enough: Subversive marketing strategies for startups
Alistair Croll (author, advisor, entrepreneur)