Silent installation through ad networks

Researchers allege that a digital advertising infrastructure operated by an Israeli company is being used to deliver "zero-click" spyware. In such attacks, the user does not need to click a link or download a file; malicious code reaches the device while an ad is being displayed.

Why it matters

Zero-click attacks are among the hardest to detect and most dangerous surveillance methods because they do not rely on user error. Ad networks, meanwhile, can reach millions of sites at once, giving attackers a broad distribution channel.

Context

The claim follows a recent Citizen Lab investigation showing that states have used ad networks to distribute spyware. Together, the two reports highlight the risk of ad technology turning into a surveillance tool.

What users can do

  • Keep browsers and operating systems up to date.
  • Use ad blockers and security software.
  • Avoid sites that allow suspicious ad networks.

The full scope of the research and the affected ad networks is not yet clear.