Zero-click spyware delivered through digital ads is a growing cybersecurity threat, according to researchers at Citizen Lab. The University of Toronto-based digital investigations unit has accused an Israeli advertising agency, Discover-Tech, of serving millions of online adverts that enable the installation of spyware without any user interaction. The report claims that dozens of devices at Al Jazeera, the Qatari broadcaster, were compromised through this method.
How Zero-Click Spyware Works
Unlike traditional malware that relies on users clicking links or opening files, zero-click spyware installs itself silently and automatically. Citizen Lab says Discover-Tech operates a platform called Controlium, which allows clients to "mass-profile and deanonymise" internet users and then covertly hack targets with third-party spyware. The infection occurs in seconds, without the victim's knowledge.
Find Original, High-end Home Decor that spark conversation at Grand Goldman Shop.
According to the report, Controlium harvests a user's identity and IP address when they are shown a seemingly benign custom ad—for example, for a digital game or telecom service. If the user's device has certain vulnerabilities, the spyware is delivered immediately. This technique weaponises the online advertising ecosystem at a massive scale.
The Threat Landscape: Traditional vs. Zero-Click Spyware
To understand the severity of this new delivery method, consider the differences between traditional malware and zero-click spyware:
| Feature | Traditional Malware | Zero-Click Spyware |
|---|---|---|
| User Interaction | Required (click, download) | None |
| Infection Speed | Seconds to minutes | Seconds |
| Detection | Often visible (pop-ups, slowdowns) | Silent, hard to detect |
| Delivery Vector | Email, malicious sites | Digital ads |
Key Takeaways
- Zero-click spyware requires no user action to infect a device.
- Digital advertising networks are being exploited to deliver spyware at scale.
- The platform Controlium allegedly profiles millions of users and deanonymises them.
- High-profile targets, such as journalists at Al Jazeera, have been affected.
- Traditional antivirus may not detect such silent infections.
Protecting Against Zero-Click Attacks
Defending against zero-click spyware is challenging because there is no obvious trigger. However, users can reduce risk by keeping devices updated with the latest security patches, using reputable ad blockers, and avoiding untrusted websites. For high-risk individuals like journalists and activists, advanced tools such as locked-down operating systems and network monitoring are recommended.
Citizen Lab's report highlights the urgent need for ad-tech companies to vet their clients and for regulators to address the weaponisation of online advertising. As spyware becomes more sophisticated, the line between advertising and cyberwarfare continues to blur.
FAQ
What is zero-click spyware?
Zero-click spyware is malicious software that can be installed on a device without any action from the user. It exploits vulnerabilities in software to infect a device silently, often through vectors like digital ads or messaging apps.
How does digital advertising enable spyware installation?
Digital ads can contain malicious code that exploits browser or device vulnerabilities. When a user views an ad, the code can execute and install spyware without any clicks. Platforms like Controlium allegedly use this method to profile and infect targets.
Who is at risk of zero-click spyware attacks?
High-profile individuals such as journalists, activists, politicians, and business executives are often targeted. However, any internet user could be at risk if they visit compromised websites or view malicious ads.
Browse the Shop
Acacia frida deluxe solid wood bed frame |
Bedroom bench |
Bed chest drawers |
Lingerie dresser |
Frame base |
Mirror with jewelry storage |
30 Bathroom Vanity |
Memory foam queen mattress |
Mattresses for back pain |
Nightstand set of 2 |
Grand Goldman Shop |
Civil Lawyer
Deutschland Trikot WM 2026
