{
  "id": 14800344,
  "title": "Targeted ads delivered 0-click exploits to install mercenary malware",
  "url": "https://urgent.news/2026/10/15/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-15T20:32:41.000Z",
  "source": {
    "name": "Ars Technica",
    "slug": "ars-technica",
    "url": "https://arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware/"
  },
  "original_language": "en",
  "account": "Researchers from the University of Toronto's Citizen Lab have uncovered a new threat in which mercenary hackers have infiltrated advertisements with zero-click exploits. These malicious exploits install sophisticated malware on devices simply by loading a website or opening an app, according to the lab's findings published on Thursday. This marks the first verified case of zero-click mercenary spyware being delivered via targeted ads, according to the study.\n\nThe attacks are particularly dangerous because they operate without any user interaction and remain undetectable unless forensic hardware or software is employed. The lab identified the campaign as \"AdFection\" and confirmed that it successfully infected 45 devices at the international media organization Al Jazeera during 2024 and 2025. The researchers warn that this threat poses a significant risk not only to individual users but also to states and civil society at large.\n\nCitizen Lab researchers urge news organizations worldwide to be aware of this new threat, which may target both newsrooms and individual journalists, editors, and staff members. They emphasize that the distribution of spyware through targeted ads represents a serious security risk for everyone.",
  "summary": "The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}