Targeted ads delivered Candiru spyware in zero-click attack

Summary

BleepingComputer reports that targeted online ads delivered Candiru spyware to devices at Al Jazeera Media Network in a zero-click attack that required only rendering the malicious ads on a victim’s device. Al Jazeera describes an Israeli firm’s ad-based zero-click malware as a global security risk. This follows earlier reports that dozens of Al Jazeera devices were compromised by zero-click spyware delivered through online ads, with an Israeli ad-tech firm implicated.

Timeline

1. Al Jazeera

   16 Oct 2026, 14:12 UTCSource ↗

   Al Jazeera reports on an Israeli firm’s zero-click malware attack, which uses ads to target victims without any action on their part and poses a global security risk.

2. BleepingComputer

   16 Oct 2026, 17:20 UTCSource ↗

   BleepingComputer reports that targeted online ads delivered Candiru spyware to devices at Al Jazeera Media Network, requiring only that the malicious ads render on a victim’s device.