Source: thehackernews.com
Citizen Lab researchers revealed that Candiru, an Israeli spyware vendor, infected devices at Al Jazeera through malicious online advertisements. The attacks required no user interaction, executing hidden code the moment an ad loaded on screen. In some cases, ads loaded invisibly in the background, making detection even harder. Candiru sells its spyware to government clients, raising serious concerns about state-sponsored surveillance targeting journalists. This represents a significant escalation in spyware delivery methods, weaponizing the online advertising ecosystem. The zero-click nature of the attack makes it extremely difficult for users to protect themselves. Citizen Lab's investigation links the infections directly to targeted ad campaigns, suggesting a sophisticated and deliberate targeting operation against the news network.
