{
  "id": 16025877,
  "title": "Hackers are turning web browsing into a spyware trap",
  "url": "https://urgent.news/2026/10/22/hackers-are-turning-web-browsing-into-a-spyware-trap",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-22T10:00:05.000Z",
  "source": {
    "name": "Axios",
    "slug": "axios",
    "url": "https://www.axios.com/2026/10/22/spyware-phones-security-threats"
  },
  "original_language": "en",
  "account": "Cybercriminals are increasingly exploiting online advertising infrastructure and legitimate websites to deliver spyware to iPhones, even without direct clicks from victims, according to new research. Two campaigns, with suspected ties to China, have been discovered by researchers at iVerify and Report URI. One attack infected an employee's iPhone after they scrolled past a soccer advertisement on Instagram, stealing login credentials and searching cryptocurrency wallets. The other campaign affected nearly 8,000 legitimate websites, using expired domains to redirect visitors toward malicious software. Both attacks exploit tools that automatically load as people browse the internet, avoiding the need for victims to click malicious links. Researchers warn that this is now the fastest proliferating threat to mobile devices, emphasizing the importance of keeping mobile operating systems updated to protect against these threats.",
  "summary": "Hackers are finding new ways to infect iPhones with spyware — even when victims never click a malicious link — according to new research shared with Axios. Why it matters: Software once used to spy on politicians, journalists and other high-value targets is becoming a tool for everyday cybercriminals looking to steal cryptocurrency and login credentials. Driving the news: Researchers at iVerify…",
  "key_points": [
    "Cybercriminals exploit online ads and legitimate websites to deliver spyware.",
    "Two campaigns, suspected Chinese ties, infect iPhones through Instagram ads.",
    "Nearly 8,000 legitimate sites used to redirect visitors to malicious software."
  ],
  "editors_take": "The shift toward automated exploits via advertising infrastructure removes the necessity for user interaction, turning passive web browsing into a high-speed vector for mobile device compromise.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}