THREATNOIR
Subscribe
Back to advisories

Zero-click attacks used targeted ads to deliver Candiru spyware

Candiru spyware was deployed to Al Jazeera staff via malicious ads using zero-click AdFection technique. No user interaction required. Millions of users potentially exposed to these ads across the web.

AI summary of the linked sources. Not reviewed by an editor. How this works

CRITICALAdvisoryOct 18, 2026
Action required
Hunt for Candiru indicators of compromise in network telemetry and endpoint logs. Block known ad networks and Discovere-Tech infrastructure. Monitor for command and control beaconing from affected staff devices.
Affected products
Discovere-TechControliumDevilsTongueAdFectionAladdin
Linked articles
Source links