Zero-Click Spyware Delivered via Malicious Ads: First Technical Proof
Published 1 d ago4 sourcesEvidence: Reported
Candiru spyware was delivered to Al Jazeera Media Network devices via zero-click malicious ads, requiring only ad rendering. This marks a notable shift to ad-delivered spyware, expanding the attack surface beyond traditional phishing. The full scope of targeting and attribution remains unclear, but the method signals advanced offensive capabilities.
Locations
Entities
Multiple Israeli firms, including Discover-Tech, are confirmed to be weaponizing digital ad networks to deliver zero-click spyware, enabling covert surveillance. This novel supply-chain attack vector has targeted Al Jazeera journalists, EU/NATO websites, and potentially millions of devices, with technical proof of ad-based zero-click infection now established. The full scope of targeting and attribution to specific state sponsors remains partially unconfirmed.
Published 1 d ago4 sourcesEvidence: Reported
Published 12 h ago1 sourceEvidence: Reported
Published 1 d ago4 sourcesEvidence: Reported
Published 1 d ago4 sourcesEvidence: Reported
Published 1 d ago3 sourcesEvidence: Reported
Published 1 d ago4 sourcesEvidence: Unknown
Published 1 d ago3 sourcesEvidence: Reported
Published 1 d ago3 sourcesEvidence: Reported