Zero-Click Spyware Discovered Infecting Mobile Devices Through Digital Ads
· Technology · Wired, Financial Times, The Guardian
Researchers at The Citizen Lab at the University of Toronto have uncovered a sophisticated zero-click spyware campaign dubbed AdFection, which silently infects mobile devices as targets browse past digital advertisements. Investigators documented attacks involving an Israeli-registered advertising firm linked to servers associated with the spyware developer Candiru. Between 2024 and 2025, the campaign targeted 45 devices belonging to news outlet Al Jazeera without requiring any user interaction or clicks. Security experts warn that exploiting the online ad ecosystem represents a dangerous new vector for mercenary spyware deployment. The exact scope of broader civilian infections outside the targeted journalistic group remains under investigation.
Why it matters
Journalists, dissidents, and high-profile users face an unprecedented surveillance threat where simply viewing an ad can compromise their entire mobile device.
Read the original report — Wired
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.