Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices of targeted individuals when they did nothing other than load a website or open an installed app. The finding, published Thursday by the University of Toronto’s Citizen Lab, said the incident is likely to be the first confirmation of zero-click mercenary spyware delivered through targeted ads.
Targeted ads delivered 0-click exploits to install mercenary malware
About this summary. This is a short excerpt from the description that Ars Technica published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://arstechnica.com/security/2026/10/targeted-ads-delivered-0-click-exploits-to-install-mercenary-malware/
Source attribution: headline and facts are from Ars Technica (arstechnica.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections
Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published…
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus…
Spyware found on devices belonging to prominent Serbian critics as elections loom
Spyware has been detected on devices used by some of Serbia’s most prominent figures connected to the country’s political upheaval, according to researchers who…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain…
A-GE: Privacy-Preserving Age Assurance via Fine-Grained Motion
arXiv:2610.33206v1 Announce Type: new Abstract: Age assurance faces a fundamental privacy dilemma: meaningful assurance typically requires revealing identity or other…
Signal Vulnerability Could Keep Calls Alive After Users Hang Up
A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately. A critical vulnerability, tracked as…