How Israeli firm’s ‘zero-click’ malware attack poses global security risk
Summary
Researchers found that an Israeli spyware company used a new kind of cyberattack called "zero-click" malware, which can infect a phone or laptop just by visiting a website or refreshing an app. This malware secretly steals personal data without the user clicking anything and has targeted journalists, including staff from Al Jazeera.Key Facts
- "Zero-click" malware infects devices without any user action like clicking or downloading files.
- In June 2025, 45 devices used by Al Jazeera journalists were infected with this malware.
- The spyware is linked to an Israeli company called Candiru, known for targeting activists and journalists worldwide.
- This malware spreads through malicious ads bought by Discover-Tech, which redirect users to infected servers.
- The spyware can collect sensitive information like files, keystrokes, screenshots, microphone and camera data, emails, and messages.
- To avoid detection, the malware sends stolen data in small encrypted pieces over time.
- The US government blacklisted Candiru in 2021 due to its illegal hacking activities.
- Experts say this type of attack is a serious global security threat because it combines multiple vulnerabilities and can bypass security protections in devices.
Read the Full Article
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.
