Zero-Click Spyware
A spyware attack technique that achieves infection without any user click, download, or authorization interaction. It typically combines rendering engine parsing vulnerabilities, privilege escalation vulnerabilities, and silent installation mechanisms to achieve silent compromise.
Timeline (last 90 days)
An Israeli company distributed zero-click spyware through an online advertising network, and the attack chain completes infection without any user interaction.
Zero-click spyware usually targets specific groups such as journalists, activists, and corporate and government executives, and attackers pursue long-term persistence and data theft rather than ransomware monetization.
Citizen Lab released an investigation stating that governments in multiple countries are abusing the practice of embedding malicious code in online ads to deliver zero-click spyware to target devices.
All Facts (3)
An Israeli company distributed zero-click spyware through an online advertising network, and the attack chain completes infection without any user interaction.
50%UnverifiedZero-click spyware usually targets specific groups such as journalists, activists, and corporate and government executives, and attackers pursue long-term persistence and data theft rather than ransomware monetization.
50%UnverifiedCitizen Lab released an investigation stating that governments in multiple countries are abusing the practice of embedding malicious code in online ads to deliver zero-click spyware to target devices.
50%