Freedom.Press Zero-click Spyware Targets Journalists via Digital Ads
Article Content
- •Discover-Tech uses digital ads to deliver zero-click spyware targeting journalists.
- •This marks the first known instance of no-click advertising malware in the wild.
- •Users should enhance their digital security practices to mitigate risks.
A report by Citizen Lab reveals that a company named Discover-Tech is using digital ads to deploy zero-click spyware targeting journalists and other individuals. This spyware can infect devices simply by displaying an ad, marking a significant shift in malware delivery methods. The report indicates that this is the first known instance of no-click advertising malware being identified in the wild. While zero-click spyware is rare, the article emphasizes that traditional malware remains a more common threat. Users are advised to practice good digital hygiene, such as keeping devices updated and blocking ad trackers. The full scope of the impact and the number of affected individuals remain unclear, but the threat is significant enough to warrant caution among media professionals.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Mercenary in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Who is targeted by this spyware?
How does this spyware infect devices?
What can users do to protect themselves?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…