Zero-click spyware spreads through targeted online ads, researchers say

What happened and what to do

According to The Record's report on new research, a powerful zero-click spyware is infecting devices around the world through targeted online advertising. The coverage stresses that the infection route requires no click from the user, which makes the threat hard to notice and hard to contain with user training alone.

For a company, the case suggests reviewing the exposure of corporate devices and browsers to third-party advertising. A practical response includes inventorying mobile devices and workstations, mapping which ones access news and social media sites, and monitoring signs of compromise in network and endpoint logs, such as unusual connections to tracking domains. It is also worth evaluating ad blockers and managed DNS filtering on organizational devices, along with fast operating system and browser update policies.

How the consultancy can help

Diagnosis of corporate device exposure to malicious advertising, with a survey of fleets, traffic sources and monitoring blind spots. Then a scoped proposal for a log and endpoint collection and alerting pipeline, DNS filtering and a risk dashboard, deployed on the client's infrastructure.

Next step

If your company wants to understand its exposure to this kind of threat, send a short description of your device fleet and operations. You will receive a scoped proposal from Wendelmaques with diagnosis, steps and engagement format.