Researchers at The Citizen Lab have, for the first time, released technical evidence of sophisticated mercenary spyware being distributed through online advertising. WIRED's coverage framed it as a "nightmare scenario," and the description fits: zero-click spyware targeted ads could turn the ordinary ad ecosystem into a delivery route for surveillance tools. This post explains what has been reported, how this class of attack generally works, and which defenses are worth your time.

One note on scope: the source reporting available to us is brief, so we are limiting specifics to what has been published. Where we describe how ad-based attacks work in general, we are explaining the concept, not adding details about this particular case.

What Citizen Lab found

Citizen Lab is a research group known for investigating digital threats against journalists, activists, and other civil society targets. According to the reporting, its researchers have now published technical evidence showing that mercenary spyware, meaning commercial surveillance tools sold to paying customers, can be delivered through online advertising.

The key word is "first." Security researchers have long warned that advertising networks could be abused this way, but publicly released technical proof is what moves a concern from theoretical to documented. That is why this finding matters even if you are not a likely target.

How zero-click spyware spreads through ads

A zero-click attack needs no action from the victim. There is no suspicious link to tap and no attachment to open. The device is compromised simply by processing something it was sent.

Online ads are a plausible carrier for several reasons:

  • Ads load automatically. Web pages and apps fetch and render ad content in the background, without any deliberate choice from you.
  • Ads are targeted. Ad systems are built to reach specific audiences, which means an attacker could in principle aim content at a narrow group instead of the general public.
  • Ad chains are complex. Content often passes through several intermediaries before it reaches a screen, which makes it hard for any single party to inspect everything.

In practical terms, this means the same infrastructure that lets advertisers find a particular type of user could help an attacker find a particular person. We do not have further technical detail on the exact mechanism from the source, so readers who want the full analysis should consult Citizen Lab's published research directly.

Why phones and ad targeting leave users exposed

Phones are attractive targets because they hold messages, location history, photos, and credentials, and they are almost always connected. They also constantly render third-party content inside browsers and apps.

Ad targeting adds a second layer of exposure. Data brokers and ad platforms collect signals about who you are and where you go, and those signals are what make precise targeting possible. The more of that data circulates, the easier it is for a motivated buyer of mercenary spyware to pick out a specific individual.

This is also why the realistic risk is uneven. Mercenary spyware is expensive and has historically been associated with high-value targets such as journalists, dissidents, and officials, not everyday users. Most people are unlikely to be the intended victim. But a delivery method that rides on mass advertising infrastructure is worth understanding, because defenses that help against it also help against more common threats.

What reduces your risk (and where a VPN fits)

No single tool stops an attack like this. A layered approach is the sensible response.

Keep your devices updated. Spyware relies on software flaws, and updates close them. Our coverage of how Lazarus Group exploited a Windows kernel bug before the August patch shows how attackers can use a flaw before a fix exists, and why installing patches promptly still matters once it does.

Use Lockdown Mode if you are at elevated risk. Apple's Lockdown Mode is designed for people who may face targeted attacks. It reduces the attack surface of the device, at the cost of some features. If you are a journalist, activist, or work in a sensitive field, it is worth considering.

Review your ad-tracking settings. Limiting ad personalization and resetting or restricting your advertising identifier reduces the data available for targeting. Browser-level content blocking can also cut down how much third-party ad content loads at all.

Understand what a VPN does and does not do. A VPN encrypts your traffic between your device and the VPN server and can hide your IP address from sites you visit. That can reduce some tracking signals. It does not patch your phone, and it does not stop a compromised device from processing malicious content. Treat it as one limited layer, not a shield against zero-click exploits.

What This Means For You

For most readers, this research is a signal, not a reason to panic. The documented use of mercenary spyware is aimed at a small number of people, and the finding does not mean ordinary ad browsing is likely to compromise your phone today. What it does show is that advertising infrastructure can be turned into an attack channel, which strengthens the case for basic hygiene: current software, fewer trackers, and reduced exposure to unnecessary third-party content.

If you handle sensitive information or have reason to think you could be targeted, the bar is higher. Combine updates, Lockdown Mode, and tighter ad controls, and consider seeking guidance from digital security organizations that support at-risk groups.

Key takeaways

  • Update your phone and apps as soon as patches are available.
  • Turn on Lockdown Mode if you are at elevated risk.
  • Limit ad personalization and reset or restrict your advertising ID.
  • Consider a content blocker to reduce third-party ad loading.
  • Use a VPN for privacy, but do not rely on it to stop zero-click spyware targeted ads.
  • For broader patching context, see our reporting on a ninth Windows zero-day dropped by researcher Nightmare Eclipse.

Citizen Lab's finding is a reminder that the ad ecosystem is part of your attack surface. You cannot control every ad network, but you can shrink the opening with a few deliberate settings and consistent updates.