zero-click spyware

The Citizen Lab, a University of Toronto digital rights research unit, reports that governments are exploiting online advertising networks to infect targets with 'zero-click' spyware. It found evidence that dozens of devices at the media organization Al Jazeera were hacked after staff were shown malicious ads, with no interaction required. The findings renew scrutiny of commercial spyware and state-backed hacking of journalists.

Researchers at The Citizen Lab have released technical evidence, for the first time, that sophisticated mercenary spyware is being distributed to phones through online advertising, infecting devices without any click or user interaction. The findings are being called a nightmare scenario for mobile security, since ad networks could deliver spyware to targets at scale. Security experts are urging closer scrutiny of the adtech supply chain.

An Israeli company is reported to be distributing zero-click spyware through online advertising networks, meaning targets can be infected simply by loading an ad, with no interaction required. The report has drawn attention on Hacker News, where readers are discussing how ad infrastructure can be abused for surveillance and what it means for ordinary web users.

The Guardian reports that an Israeli spyware company used digital advertising infrastructure to deliver 'zero-click' spyware to targets, according to researchers. The technique reportedly means victims' devices could be compromised without any interaction such as clicking a link. The findings have sparked renewed debate about commercial surveillance firms and the security of online ad networks.

Researchers at the University of Toronto say online ads are being weaponised to spread spyware. They report that Discover-Tech's Controlium software allows clients to mass-profile internet users and then covertly hack selected targets without any clicks or interaction, raising fresh concerns about surveillance technology being marketed to a broad client base.

Researchers at Citizen Lab report on AdFection, a technique in which disinformation-tech actors turned targeted advertising into a delivery pipeline for zero-click spyware, meaning victims could be infected without clicking anything. The findings raise fresh concerns about the ad-tech ecosystem being exploited for surveillance and are prompting discussion about platform accountability and the security of programmatic ad delivery.

Researchers report that Israeli-made spyware infected hundreds of millions of devices through zero-click attacks delivered via online advertisements, in what is described as the first campaign of its kind spread through ads. Millions of people are said to be affected, including devices belonging to Al Jazeera staff. The findings have sparked alarm over mobile security and commercial spyware.

Wired reports what security researchers call a 'nightmare scenario': zero-click spyware that can infect phones without any user interaction, delivered through targeted advertising networks. The report has prompted alarm among privacy and security commentators, who warn that ad targeting infrastructure could be exploited for surveillance at scale. Posts on Mastodon are sharing the story with expressions of concern.

An Israeli company, Disinformation Technologies (Discover-Tech), reportedly spied on internet users through a sprawling network of zero-click online ads. People who visited sites or used apps carrying the malicious ads could be identified and tracked, with the system also used to help hack targets' devices. The revelations are drawing comparisons to commercial spyware scandals and raising fresh questions about the unregulated surveillance-for-hire industry.

Researchers at the University of Toronto's Citizen Lab say Israeli firm Discover-Tech uses digital advertising to deliver its Controlium spyware. The software allegedly lets clients mass-profile internet users before covertly hacking selected targets without any clicks from the victim. The findings raise fresh concerns over commercial spyware being sold to private clients and the abuse of online ad networks for surveillance.

Zero-click spyware is reportedly infecting smartphones through malicious targeted advertisements, without users needing to tap anything or install anything themselves. The attacks exploit mobile ad delivery to compromise devices silently. The report is raising fresh concerns about mobile ad networks and phone security, though details on affected platforms and the groups behind the campaigns remain limited.

Researchers at the University of Toronto say Israeli company Discover-Tech's Controlium software allows clients to mass-profile internet users through digital advertising and then covertly hack selected targets without any clicks. The findings have drawn attention to how ad networks can be exploited for surveillance, raising fresh concerns about commercial spyware and privacy protections.

Security discussions are circulating about a newly confirmed zero-click attack method dubbed AdFection, in which mercenary spyware linked to Candiru infects targets through ordinary-looking online ads. If a user is specifically targeted, the malicious ad loads and infection occurs with no click required. Commenters urge blocking ads as a precaution, noting this is the first confirmed in-the-wild case of ad-delivered mercenary spyware.

Discover-Tech, a company operating the ad-targeting platform Controlium, is reported to enable clients to mass-profile and deanonymise internet users and then covertly hack chosen targets with third-party spyware. Unlike infections that trick victims into clicking malicious links, this approach requires no interaction from the target, making it far harder to detect or defend against.

Wired reports on a 'nightmare scenario' in which zero-click spyware is infecting phones through targeted advertising, meaning devices could be compromised without users opening any malicious link or attachment. The finding raises fresh concerns about mobile ad networks being exploited as an attack vector, with tech observers describing it as a serious new privacy and security threat.

An Israeli company is reported to be using digital advertising as a delivery channel for 'zero-click' spyware, meaning devices can be infected without any user interaction such as clicking a link. The story is being discussed on Hacker News, where commenters are debating how the ad-based infection method works and what it means for mobile security and surveillance.

Wired reports that zero-click spyware is infecting smartphones through targeted advertising, allowing attackers to compromise devices without any user interaction. The technique is described as a nightmare scenario for mobile security, since ad networks could serve malicious payloads to specific targets. The report has drawn attention among privacy and security observers discussing how ad delivery systems can be abused for surveillance.

The Citizen Lab has published a report describing "AdFection," an operation in which ad-targeting technology was allegedly exploited to deliver zero-click mercenary spyware to targeted individuals' devices. The findings point to abuse of the digital advertising ecosystem as an infection pipeline, raising fresh concerns about surveillance-for-hire firms and the security of online advertising infrastructure.