Skip to content
Journalists Targeted by Malware via Online Ads

Journalists Targeted by Malware via Online Ads

First seen 18 Oct 2026, 07:38 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 18, 2026 at 08:09 UTC

Al Jazeera journalists were infected with surveillance malware delivered through online ads, identified as 'AdFection'. The malware, linked to Israeli firms Candiru and Discover-Tech, is capable of stealing sensitive data, including messages and audio. The attack was confirmed by Canadian cybersecurity firm Citizen Lab after journalists reported unusual device behavior in 2024. Candiru, which has been blacklisted by the US, has rebranded to Integrity Labs. The malware's delivery mechanism reportedly cost several million dollars, but the identity of the actual attackers remains unknown. The incident marks a significant case of zero-click spyware exploitation targeting journalists.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2024-01-01
Journalists report unusual device behavior
Al Jazeera journalists noticed strange activity on their devices, prompting an investigation.
Tech.Yahoo
2026-10-18
Citizen Lab confirms malware delivery method
Citizen Lab confirmed the first case of zero-click spyware delivered through online ads, named 'AdFection'.
Tech.Yahoo

More articles in this cluster (2)

Following this threat?

Track Candiru and Al Jazeera in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 4

Common questions

How does the malware operate?
The malware operates as a zero-click infostealer, capable of harvesting sensitive data without user interaction.
Who is behind the attacks?
The investigation links the operation to Israeli firms Candiru and Discover-Tech, but the actual attackers remain unidentified.
What should affected journalists do?
Affected journalists should consult cybersecurity experts and consider device forensics to assess potential data breaches.