Citizen Lab finds Candiru spyware delivered via targeted ads to Al Jazeera staff
Citizen Lab researchers documented a zero-click technique, dubbed AdFection, that delivered Candiru spyware to Al Jazeera Media Network devices simply by rendering malicious online advertisements. The ads, placed through mainstream ad networks by Israeli firm Discover-Tech using its Controlium platform, contacted a 'NOAS' server that checked device details like IP address before deciding whether to push spyware-loading code to that specific target.