Zero-click attacks used targeted ads to deliver Candiru spyware

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack, requiring only rendering the malicious ads on the victim's device. The attack exploited ad rendering to install spyware without user interaction, highlighting the growing threat of zero-click exploits in targeted surveillance.