Live Feeds
● LIVE Updated 2h ago · 19 sources tracked

Targeted ads delivered 0-click exploits to install mercenary malware

Researchers at The Citizen Lab have uncovered a campaign called AdFection that used targeted online advertisements to install Candiru mercenary spyware on mobile devices. This zero-click attack requires no user interaction, such as clicking or downloading, and only requires the device to render the malicious ad to trigger infection. The operation targeted journalists, including staff at Al Jazeera Media Network. This represents the first technical confirmation of mercenary spyware being distributed through the ad-tech pipeline to bypass traditional security warnings.

🎙️

Listen to Live Briefing

Real-time synthesized voice briefing · Live Feeds Desk

⏱ ~3 min
Speed:
RSS Source map (19)
⚡ Key Developments & Real-Time Context
Text size:
  • ✓ The Citizen Lab uncovered a campaign dubbed AdFection using targeted ads to deliver mercenary spyware.
  • ✓ Candiru spyware was delivered to Al Jazeera Media Network devices via zero-click attacks.
  • ✓ The attacks required only that the victim's device render the malicious ads to trigger infection.
  • ✓ The operation involved an Israeli ad-tech firm.
🛡️ Source Corroboration: 19 independent reporting domains (95% confidence) ⏱ Read time: ~2 min

What changed

The Citizen Lab released technical evidence identifying the AdFection campaign and the use of Candiru spyware.

Live updates

  1. Israeli Firm Used Targeted Ads to Deliver Zero-Click Spyware

    Researchers at The Citizen Lab have uncovered a campaign called AdFection that used targeted online advertisements to install Candiru mercenary spyware on mobile devices. This zero-click attack requires no user interaction, such as clicking or downloading, and only requires the device to render the malicious ad to trigger infection. The operation targeted journalists, including staff at Al Jazeera Media Network. This represents the first technical confirmation of mercenary spyware being distributed through the ad-tech pipeline to bypass traditional security warnings.

    Why it matters

    Mercenary spyware is typically delivered via SMS or direct links, but weaponizing the ad industry allows attackers to target specific individuals with high precision. This method turns legitimate advertising networks into delivery pipelines for sophisticated surveillance tools.

    What is confirmed

    • The Citizen Lab uncovered a campaign dubbed AdFection using targeted ads to deliver mercenary spyware.
    • Candiru spyware was delivered to Al Jazeera Media Network devices via zero-click attacks.
    • The attacks required only that the victim's device render the malicious ads to trigger infection.
    • The operation involved an Israeli ad-tech firm.
    • The malware was delivered without requiring the user to click, download files, or see warnings.

    Still unconfirmed

    • Israeli spyware reached millions of phones worldwide.
    • Israeli spyware targeted hundreds of millions of people.

    What to watch next

    • Technical analysis of the specific ad networks used to facilitate AdFection
    • Official response from Discover-Tech regarding the allegations
    • Identification of other media organizations targeted by the campaign
    Sources used for this update (19)
    1. arstechnica.com — Ars Technica - Serving the Technologist since 1998. News, reviews, and ...
    2. www.theguardian.com — AI godfather Geoffrey Hinton: ‘We’re creating alien beings. I’m willing to be selfish and choose humans’ | Donald Trump
    3. WIRED — ‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
    4. The Citizen Lab — Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware
    5. Reuters — Israeli firm used online ads to run vast spy operation, researchers say
    6. The Guardian — Online ads weaponised to deliver ‘zero-click’ spyware, researchers say
    7. Al Jazeera — Israeli ad-tech firm helped place spyware on Al Jazeera devices
    8. Ars Technica — Targeted ads delivered 0-click exploits to install mercenary malware
    9. Yahoo — Israeli spyware reaching millions of phones worldwide, researchers say
    10. Forbes — Unprecedented Cyberattack Used Malware Ads To Spy On Journalists, Report Says
    11. Computerworld — No click required: How the ad industry became a pipeline for mercenary spyware
    12. cybersecuritynews.com — Just Viewing an Online Ad Can Infect Your Device With Spyware
    confidence 95%
📊

Community Sentiment: How do you assess this situation?

Voice your perspective · Real-time aggregated sentiment from the Live Feeds community