Zero-Click Ads Deliver Spyware

Zero-click ads delivered Candiru spyware to at least 45 Al Jazeera devices between 2024 and 2025. Israeli vendor Discover-Tech facilitated the breach via its Controlium platform, placing 3.77 billion bids and winning 442 million auctions between March and June 2026. Major advertising companies subsequently removed offending accounts and blocked access to malicious domains.