Zero-click exploit

Targeted Ads Delivered Spyware to iOS and Android Devices Without a Single Click

Citizen Lab uncovered a campaign it called AdFection that infected 45 devices at the Al Jazeera media organization during 2024 and 2025 through advertisements containing “zero-click” exploits to plant spyware. The findings indicate the exploitation of digital advertising infrastructure to target journalists and government and security organizations.