Zero-Click Spyware Delivered via Targeted Ads, Researchers Find

· Tech

Researchers at The Citizen Lab have released technical evidence for the first time showing that sophisticated mercenary spyware was distributed through online advertising. The operation used targeted ads to deliver zero-click exploits that installed the malware on phones without any user interaction. Ars Technica described the incident as likely the first confirmation of mercenary spyware being delivered by targeted ads. Such spyware is typically sold to governments and used against journalists, activists, and dissidents. The finding raises questions about the security of ad networks and the responsibilities of platforms that serve them. It also underscores how commercial surveillance tools are evolving to reach targets through everyday online activity.

Why it matters：The first technical proof that mercenary spyware spreads via ad networks exposes a new infection path that platforms and advertisers have not secured, with implications for user safety and the commercial surveillance industry.

Key points

  • The Citizen Lab published the first technical evidence of spyware delivered via targeted ads.
  • The exploits were zero-click, installing malware without user interaction.
  • Mercenary spyware is typically sold to governments for use against journalists and activists.

Sources (original reporting)

More stories from this day