Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
Researchers from the University of Toronto's Citizen Lab have uncovered a new threat in which mercenary hackers have infiltrated advertisements with zero-click exploits. These malicious exploits install sophisticated malware on devices simply by loading a website or opening an app, according to the lab's findings published on Thursday. This marks the first verified case of zero-click mercenary spyware being delivered via targeted ads, according to the study.
The attacks are particularly dangerous because they operate without any user interaction and remain undetectable unless forensic hardware or software is employed. The lab identified the campaign as "AdFection" and confirmed that it successfully infected 45 devices at the international media organization Al Jazeera during 2024 and 2025. The researchers warn that this threat poses a significant risk not only to individual users but also to states and civil society at large.
Citizen Lab researchers urge news organizations worldwide to be aware of this new threat, which may target both newsrooms and individual journalists, editors, and staff members. They emphasize that the distribution of spyware through targeted ads represents a serious security risk for everyone.
Written by urgent.news from Ars Technica's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
