Targeted ads delivered 0-click exploits to install mercenary malware
Summary
Ars Technica reports on a Citizen Lab study showing targeted ads delivering zero-click exploits that install mercenary spyware (AdFection) on iOS and Android devices. The campaign, linked to Candiru (Integrity Labs) and Discover-Tech, used ad networks to reach specific profiles, with infections confirmed at Al Jazeera and other high-profile targets. The investigation highlights significant security and privacy risks in online advertising ecosystems and notes that several vendors have removed Discover-Tech from platforms, urging media organizations and individuals to adopt mitigations.