Silent infection through ad networks
Digital rights group Citizen Lab said it found evidence that some governments are abusing online ad networks to plant spyware on targets' devices. The technique is known as "zero-click": the user does not need to tap a link or download a file.
Al Jazeera devices targeted
According to the group, dozens of devices at media organization Al Jazeera were compromised after being shown malicious online ads. In other words, the attack ran through the ad slots on ordinary web pages the targets visited.
Why it matters
Ad networks are among the most widespread content delivery channels on the internet. Using that channel to deliver spyware means even routine browsing can be a vector. Citizen Lab's findings are being seen as a fresh example of state-linked surveillance tools being used against journalists and media organizations.
