‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

https://media.wired.com/photos/6acfe0c101e1efc169db5a0f/191:100/w_1280,c_limit/Security_Sophisticated%20Zero-Click%20Spyware%20Found%20Being%20Distributed%20by%20Targeted%20Ads%20for%20the...

On Thursday, researchers from The Citizen Lab at the University of Toronto revealed a worst-case scenario found in the wild: spywaresilently infecting targets as they browse past ads in their daily digital lives.

Dubbing the attacks “AdFection,” the researchers documented a campaign in which an Israeli-registered advertising firm allegedly connected to the servers linked to a spyware company and infected dozens of devices with its invasive malware. Citizen Lab believes this to be the first detailed technical evidence made publicly available of sophisticated spyware infecting devices via digital ads.

Zero-click hacks are a holy grail for attackers and catastrophic for victims, because they can automatically install malware on devices without requiring any interaction or missteps from the target. When sophisticated hackers have deployed rare zero-clickattacks in recent years, they have often exploited vulnerabilities in mobile messaging and communication apps to infect victims. But attackers have also exploited the...

Copyright of this story solely belongs to www.wired.com. To see the full text click HERE

Read more