#3
Ars Technica Security
general
October 15, 2026 at 20:32 UTC
Targeted ads delivered 0-click exploits to install mercenary malware
By Dan Goodin
AI Summary
Researchers confirmed the first known instance of mercenary spyware — specifically Candiru — delivered via targeted online advertisements in a zero-click attack against Al Jazeera Media Network staff, requiring only that the malicious ad be rendered on the victim's device. The AdFection technique exploits the online advertising ecosystem to deliver exploits without any user interaction, with significant implications for ad networks, enterprises, and high-value individuals who cannot rely on 'don't click' advice. Regulators and ad platforms face new pressure to audit ad delivery pipelines for exploit payloads.
Relevance score: 87.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →