Security · Updated 15 Oct, 09:31 pm IST
Citizen Lab: Candiru zero-click spyware infected Al Jazeera via ads

Why it matters for readers: Demonstrates that malware can run without clicks, using ads as a covert delivery method.
- Citizen Lab traced infections of Candiru spyware at Al Jazeera to targeted online adverts.1
- The attacks were zero-click: the hidden exploit executed when an ad loaded, with no user interaction required.1
- In some cases the malicious ad loaded out of sight in the background, still triggering the exploit.1
- Candiru is an Israeli maker of spyware that is sold to governments, according to the report.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started