https://www.live-feeds.com/feed/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malwareContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malwarehttps://www.live-feeds.com/feed/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware#u134929Mon, 19 Oct 2026 06:57:07 +0000Researchers at The Citizen Lab have uncovered a campaign called AdFection that used targeted online advertisements to install Candiru mercenary spyware on mobile devices. This zero-click attack requires no user interaction, such as clicking or downloading, and only requires the device to render the malicious ad to trigger infection. The operation targeted journalists, including staff at Al Jazeera Media Network. This represents the first technical confirmation of mercenary spyware being distributed through the ad-tech pipeline to bypass traditional security warnings.Why it mattersMercenary spy