Follow the latest coverage, related explainers and connected technology stories.
Citizen Lab uncovered “zero-click” attacks that used targeted digital advertisements to install Candiru spyware on devices belonging to Al Jazeera Media Network, by exploiting the advertising ecosystem and the scripting within it. The operation involved billions of ad auctions, prompting major advertising companies to remove associated accounts and domains.
Citizen Lab uncovered a campaign it called AdFection that infected 45 devices at the Al Jazeera media organization during 2024 and 2025 through advertisements containing “zero-click” exploits to plant spyware. The findings indicate the exploitation of digital advertising infrastructure to target journalists and government and security organizations.