New ‘zero-click’ spyware hacked phones using targeted ads
Source: FT World ↗ (cross-verified by 4 outlets — full list below)
Government‑backed “zero‑click” spyware was used to infiltrate at least 45 Windows computers belonging to the media organization Al Jazeera, according to a new report from the University of Toronto’s Citizen Lab. The infections occurred in 2024 and 2025 after the devices were exposed to malicious online advertisements served through the Israeli advertising platform Discover‑Tech. The ads carried code that silently installed spyware from two known zero‑click providers, Candiru and Bindecy, allowing the attackers to steal data without any user interaction. While Citizen Lab could not identify the governments behind the operation, the findings constitute the first technical confirmation that state‑sponsored spyware can be delivered via online ads, expanding the threat surface for devices worldwide.
The report highlights how Discover‑Tech functions as a “bridge between ad vendors and the mercenary spyware ecosystem,” offering spyware makers the ability to target specific individuals or devices through the global ad‑network infrastructure. Researchers accessed a publicly available section of Discover‑Tech’s site and downloaded extensive user login records for its Controlium dashboard, including credentials belonging to employees of Candiru and Bindecy. Additionally, billions of ad‑bidding records exposed on the platform revealed that the malicious ads had been displayed across tens of thousands of mobile apps and websites between March and June 2026, reaching users in militaries, governments, critical infrastructure, and national cyber agencies. Although it remains unclear how many of those impressions resulted in successful compromises, security firm Confiant, which collaborated with Citizen Lab, found similar potentially malicious ads on devices used by the International Atomic Energy Agency and the International Criminal Court.
Citizen Lab senior researcher Bill Marczak warned that Discover‑Tech likely represents only the tip of the iceberg and urged individuals who might be targeted to disable ad tracking or block ads entirely. The ubiquity of online advertising makes complete avoidance difficult, but ad‑blockers have long been recommended as a defensive measure. Al Jazeera, Discover‑Tech, and Candiru’s parent company Integrity Labs did not respond to requests for comment. The investigation underscores a notable escalation in “malvertising” tactics, shifting from conventional ad‑based malware to the covert delivery of powerful government spyware, thereby raising concerns about the security of a broad range of devices and institutions worldwide.
⚡ Effects Interpreter
🌍World Economymedium impact
What this means for you
- ▶Global businesses tend to hedge their bets when politics gets unpredictable.
- ▶A change in tone from government can move sentiment well beyond its borders.
🏙️Local Economylow impact
What this means for you
- ▶Everyday spending habits nearby may shift once the news sinks in.
- ▶Local wages and hours worked could bend slightly with the wider trend.
🏦Rates & Bankslow impact
What this means for you
- ▶Rate-setters tend to wait for calm before acting.
- ▶Borrowing costs may hold while the political picture clears.
❤️Healthlow impact
What this means for you
- ▶Neighbours and families might feel more anxious until the dust settles.
- ▶Keeping a normal routine typically helps steady the nerves during unsettling news.
💷Wealthmedium impact
What this means for you
- ▶Markets have a habit of overreacting first and settling down later.
- ▶Investors typically reshuffle their holdings when stories like this break.
🏠Housinglow impact
What this means for you
- ▶Housing chains involving multiple buyers can be sensitive to any wider wobble.
- ▶First-time buyers might keep half an eye on mortgage rates after this.
🌍 Effects for your country
The U.S.'s central bank rate currently stands at 3.75%, so a global rates move like this could feed through to local borrowing costs. The U.S.'s economy is growing at 2.3% with inflation at 3.2%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track the U.S.'s own central bank rate closely. With the U.S.'s unemployment at 4.4%, personal-finance effects like this land on a labour market that is currently fairly stable. Health-system effects are harder to localise from economic indicators alone — the real impact in the U.S. depends more on local healthcare capacity than the figures above.
The UK's central bank rate currently stands at 3.75%, so a global rates move like this could feed through to local borrowing costs. The UK's economy is growing at 0.8% with inflation at 3.2%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track the UK's own central bank rate closely. With the UK's unemployment at 5.6%, personal-finance effects like this land on a labour market that is currently fairly stable. Health-system effects are harder to localise from economic indicators alone — the real impact in the UK depends more on local healthcare capacity than the figures above.
France's central bank rate currently stands at 2%, so a global rates move like this could feed through to local borrowing costs. France's economy is growing at 0.9% with inflation at 1.8%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track France's own central bank rate closely. With France's unemployment at 7.9%, personal-finance effects like this land on a labour market that is already under strain. Health-system effects are harder to localise from economic indicators alone — the real impact in France depends more on local healthcare capacity than the figures above.
Romania's central bank rate currently stands at 6.5%, so a global rates move like this could feed through to local borrowing costs. Romania's economy is growing at 0.7% with inflation at 7.8%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track Romania's own central bank rate closely. With Romania's unemployment at 6%, personal-finance effects like this land on a labour market that is currently fairly stable. Health-system effects are harder to localise from economic indicators alone — the real impact in Romania depends more on local healthcare capacity than the figures above.
The UAE's central bank rate currently stands at 3.65%, so a global rates move like this could feed through to local borrowing costs. The UAE's economy is growing at 3.1% with inflation at 2.5%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track the UAE's own central bank rate closely. Health-system effects are harder to localise from economic indicators alone — the real impact in the UAE depends more on local healthcare capacity than the figures above.