TechTargeted ads delivered zero-click exploits to install mercenary spyware

Researchers say mercenary hackers embedded zero-click exploits in ads, infecting devices when targets merely loaded a website or opened an installed app. A University of Toronto Citizen Lab report says this may be the first confirmed case of zero-click mercenary spyware delivered through targeted ads. It confirmed that the AdFection campaign infected 45 Al Jazeera devices in 2024 and 2025.

spywaretargeted adszero-click exploitsAl Jazeera

AArs Technica★★★☆☆2026-10-15 20:32Original