<![CDATA[Zero-click attacks used targeted ads to deliver Candiru spyware]]>Candiru spyware was reportedly delivered to devices at Al Jazeera Media Network through targeted online advertisements, in what researchers describe as a zero-click attack. Rendering the malicious ads on a victim's device was reportedly enough to trigger the infection chain, with no user interaction required.

The reported campaign highlights how ad delivery networks can be abused as an initial access vector against high-value targets. Because the attack is triggered by ad rendering alone, traditional user-awareness training offers little protection in this scenario.

Details on specific affected versions, indicators of compromise, or mitigation steps were not provided in the source material.

Source: BleepingComputer

Does your organization treat third-party ad rendering as a potential attack surface, and if so, how are you mitigating the risk?

]]>https://xploitlk.com/topic/710/zero-click-attacks-used-targeted-ads-to-deliver-candiru-spywareRSS for NodeTue, 27 Oct 2026 07:24:49 GMTFri, 16 Oct 2026 18:30:20 GMT60