Developing ↑ Active

Researchers report spyware delivered through targeted ads

4 articles from 4 outlets First seen: October 15, 2026
Outlets: 1 left · 1 center · 2 unclassified · Earliest publisher-stamped report: Wired

On Thursday, University of Toronto researchers said targeted digital advertisements delivered zero-click spyware to 45 devices used by Al Jazeera journalists, affecting iOS and Android devices without users interacting with the ads.

Citizen Lab called the campaign AdFection and said targets could be infected by loading websites or opening installed apps. The lab said an Israeli-registered advertising firm was connected to servers linked to a spyware company. It described the findings as likely the first publicly detailed technical evidence of mercenary spyware delivered through targeted ads. Wired reported that dozens of devices were infected.

The reporting behind this story · 3 sources · as of Oct 16, 06:48 UTC

What we know

  • Citizen Lab concluded that 45 devices belonging to the news outlet Al Jazeera were targeted with zero-click attacks delivered by ads.
    receipt “Citizen Lab concluded that 45 devices belonging to the news outlet Al Jazeera were targeted with zero-click attacks delivered by ads.” — verbatim from Wired · article

Attributed reporting

  • According to Al Jazeera English, an Israeli spyware disguised as a digital advertisement firm has targeted journalists’ devices at Al Jazeera.
    receipt “An Israeli spyware disguised as a digital advertisement firm has targeted journalists’ devices at Al Jazeera.” — verbatim from Al Jazeera English · article

Framing spectrum · 4 outlets

wirepublicmainstream flavoredpartisanadvocacy
Range 4–30/100 (Wire-neutral → Mainstream) Average 17 Articles by lean: 1 left · 1 center · 0 right · 2 unclassified

Coverage patterns

Earliest report in our feed set (publisher timestamps): Wired (left), Oct 15, 10:00 UTC.

Lean Outlets Articles Who
Left 1 1 Wired
Center 1 1 Al Jazeera English
Unclassified 2 2 Ars Technica, Hacker News
Report-by-report timeline · 4

Coverage patterns reflect only the ~50 feeds Pure Report ingests — not the full media universe. Timestamps are publisher-reported. Lean labels are Pure Report's classification. Articles are grouped by automated clustering, and counts include syndicated wire copies.

Compare the coverage