NewsNTech

Targeted ads delivered 0-click exploits to install mercenary malware

10/16/2026

The University of Toronto's Citizen Lab reported that mercenary hackers used targeted advertisements to deliver zero-click exploits that installed sophisticated malware on iOS and Android devices.

The research team stated that the campaign, which they named AdFection, is likely the first confirmed instance of zero-click mercenary spyware distributed through ads.

The attack method required no interaction from the target. Malware installed simply by loading a website or opening an installed application.

Citizen Lab researchers noted that these infections are invisible unless users employ special forensic hardware or software to detect them.

Keep reading

Read the full story

Open on NewsNTech