← Today's brief

Security · Updated 15 Oct, 09:31 pm IST

Citizen Lab: Candiru zero-click spyware infected Al Jazeera via ads

Image: The Hacker News

Why it matters for readers: Demonstrates that malware can run without clicks, using ads as a covert delivery method.

  • Citizen Lab traced infections of Candiru spyware at Al Jazeera to targeted online adverts.1
  • The attacks were zero-click: the hidden exploit executed when an ad loaded, with no user interaction required.1
  • In some cases the malicious ad loaded out of sight in the background, still triggering the exploit.1
  • Candiru is an Israeli maker of spyware that is sold to governments, according to the report.1

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started