Skip to content
Zero-click Spyware Targets Journalists via Digital Ads

Zero-click Spyware Targets Journalists via Digital Ads

First seen 21 Oct 2026, 19:41 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 21:09 UTC
  • •Discover-Tech uses digital ads to deliver zero-click spyware targeting journalists.
  • •This marks the first known instance of no-click advertising malware in the wild.
  • •Users should enhance their digital security practices to mitigate risks.

A report by Citizen Lab reveals that a company named Discover-Tech is using digital ads to deploy zero-click spyware targeting journalists and other individuals. This spyware can infect devices simply by displaying an ad, marking a significant shift in malware delivery methods. The report indicates that this is the first known instance of no-click advertising malware being identified in the wild. While zero-click spyware is rare, the article emphasizes that traditional malware remains a more common threat. Users are advised to practice good digital hygiene, such as keeping devices updated and blocking ad trackers. The full scope of the impact and the number of affected individuals remain unclear, but the threat is significant enough to warrant caution among media professionals.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-18
Jordannews article published
Jordannews reported on the same findings from Citizen Lab, emphasizing the risks posed by zero-click spyware.
Jordannews.Jo
2026-10-21
Citizen Lab report published
Citizen Lab disclosed the use of zero-click spyware through ads by Discover-Tech, highlighting its targeting of journalists.
Freedom.Press

More articles in this cluster (4)

Following this threat?

Track Mercenary in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Who is targeted by this spyware?
The spyware primarily targets journalists, but it may also affect governments and industry actors.
How does this spyware infect devices?
It uses digital ads to deploy zero-click attacks, meaning devices can be infected simply by viewing an ad.
What can users do to protect themselves?
Users should keep their devices updated, block ad trackers, and be cautious about the software they install.