News feed

Attackers used targeted ads to deliver zero-click Candiru spyware

Event Brief generated 30 s read

City street screen with a thread running toward a closed phone

Written by an AI. It was merged from the source on this page and has not been reviewed by a person.

The short version

  • Candiru spyware was delivered through targeted online ads at Al Jazeera Media Network.
  • The attack was zero-click: rendering the ad was enough.
  • The items do not name the affected platform or the exploited flaw.

What happened

BleepingComputer reports that Candiru spyware was delivered to devices at Al Jazeera Media Network through targeted online advertisements. The attack required only that the malicious ads be rendered on the victim’s device, with no click needed.

Why it might matter

Ad delivery means people who never open a suspicious link can still be targeted. Journalists and organizations are the stated victims here.

What we don’t know yet

The items do not say which browser, OS or ad network was used, which vulnerability was exploited, or how many devices were hit.