Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Summary
Citizen Lab researchers have traced zero-click spyware infections at Al Jazeera to targeted online advertisements. The Candiru spyware, sold to governments, exploited devices the moment an ad loaded on screen, sometimes even when the ad loaded out of sight.
IFF Assessment
The article details a sophisticated spyware attack that bypasses user interaction, posing a significant threat to journalists and their sources.
Defender Context
This incident highlights the growing threat of zero-click exploits delivered through seemingly innocuous online ads, underscoring the need for robust endpoint security and advanced threat detection. Defenders should be aware of sophisticated supply chain attacks targeting news organizations and the potential for spyware to be disseminated via advertising networks.