Researchers Identify Israeli Spyware Targeting Devices Through Zero-Click Advertisements
A report from The Citizen Lab reveals that spyware developed by the Israeli firm Candiru has been used to target devices via zero-click digital advertisements. The investigation identified that at least 45 devices associated with the Al Jazeera Media Network were among those compromised.
A new investigation by the Canadian cyber watchdog group The Citizen Lab has uncovered a sophisticated surveillance campaign utilizing 'zero-click' spyware. According to the report, the spyware, developed by the Israeli company Candiru, is delivered to users' devices through digital advertisements. This method is notable because it requires no interaction from the user—such as clicking a link or downloading a file—to successfully infect a device.
The Citizen Lab report indicates that this campaign has potentially affected millions of users globally. Among the specific targets identified by researchers are devices linked to the Al Jazeera Media Network. The investigation found that between 2024 and 2025, at least 45 devices connected to the network were subjected to these ad-based attacks.
While the report highlights the technical nature of the breach, it characterizes the software as 'mercenary spyware,' implying it is sold to third-party clients rather than used exclusively by the developer. The findings represent the first publicly confirmed instance of zero-click spyware being deployed via targeted advertising. As of now, there is limited public information regarding the specific entities that purchased or deployed this software against the identified targets, and the company behind the technology, Candiru, has not issued a public response to these specific findings.
📡 Media Analysis
How each outlet framed the story — angles, word choices, and what they chose to push or ignore.
Focused on the technical nature of the breach and the specific targeting of a media organization.
"mercenary spyware"
✓ Only outlet to report: Identified that 45 devices within Al Jazeera were specifically targeted between 2024 and 2025.
🔍 What Nobody's Reporting
- ·Lack of comment or defense from the accused company, Candiru.
- ·No information regarding which specific clients or governments purchased the spyware.
- ·Absence of technical details on how the 'zero-click' mechanism bypasses standard device security.
📰 Sources
0 A-rated source(s) among 2 total. Lowest trust: Middle East Eye (B)