Candiru

Citizen Lab Identifies Zero-Click Candiru Spyware Infections at Al Jazeera via Malicious Online Ads

Researchers from Citizen Lab have traced spyware infections at the Al Jazeera news network to Candiru, an Israeli spyware vendor. The attacks used zero-click exploitation delivered through ordinary online advertisements. The malicious code executed automatically when an ad loaded, even if loaded in the background, targeting iOS devices without requiring any action from the user.