Zero-Click Spyware Campaign Targets Journalists Through Online Ads
· 23h ago · Originally reported by SC Media
A new spyware campaign is reportedly targeting journalists by delivering malicious software through online advertisements. The attack uses 'zero-click' techniques, meaning victims can be compromised without interacting with the ad.
Why it matters
This highlights the security risks in digital advertising, where malicious actors can exploit ad tech to distribute harmful software, threatening user safety and trust in online ads.
Explain it like I’m new here
It's like someone hiding a trap in a billboard that can hurt you just by walking by, without you touching it.
Terms in this story
Campaign
A campaign is an organised set of ads with a shared goal, budget, audience and time period, run across one or more channels and measured against defined KPIs.
Targeting
Targeting is choosing which people, contexts, places, devices or times should see an ad, so that the budget is spent on the audiences most likely to respond.
Creative
A creative is the actual ad content a person sees or hears, such as an image, video, audio spot, HTML5 animation or native text, delivered into an ad slot.
Related stories
Study Finds Over 2,100 AI-Generated MFA Recipe Sites Monetizing via Programmatic Ads
A new study by DecryptAds has identified more than 2,100 AI-generated recipe websites designed to maximize ad revenue through programmatic advertising. These 'slop sites' are a growing example of made-for-advertising (MFA) content fueled…
OpenAI Incident Sparks Concerns Over AI-Driven Ad Fraud in Autonomous Media Buying
A recent incident involving OpenAI has heightened industry fears about the potential for ad fraud as AI-powered autonomous media buying becomes more prevalent. The event has prompted discussions about the risks of rogue AI systems…
Israeli Ad-Tech Firm Allegedly Used American News Sites for Zero-Click Spyware
An Israeli ad-tech company is accused of turning American news websites into platforms for distributing zero-click spyware. The firm reportedly leveraged digital advertising infrastructure to infect users' devices without their interaction.
Targeted Ads Used to Deliver Spyware via Google-Listed Vendor
Citizen Lab found that targeted ads from Discover-Tech, a vendor previously listed by Google, delivered zero-click spyware to 45 Al Jazeera devices. Google has since removed Discover-Tech from its vendor list.
Yandex.Cloud Sees 40% Drop in Bot Traffic as Gambling Bots Shift Hosts
Yandex.Cloud has experienced a 40% reduction in bot traffic after gambling-related bots migrated to different hosting providers. This shift suggests a change in tactics by bot operators, possibly in response to new detection or mitigation…
Google Removes Ad Vendor After Spyware Incident Involving 45 Devices
Google has removed Discover-Tech, an ad vendor it had certified since 2020, following a spyware attack that affected 45 devices. The vendor had bid on nearly 3.8 billion ad impressions across about 200,000 apps and websites in four months.