Learn
archived
Candiru spyware delivered via zero-click targeted ad attacks
- Engineer — Learn: Zero-click ad rendering as a spyware delivery vector suggests browser isolation and strict CSP controls are worth re-evaluating, but no specific CVE, patch, or affected software is identified in the available summary.
- SOC/IR — Learn: The ad-network-as-delivery-mechanism technique is worth understanding for campaign awareness, but no IOCs or ATT&CK-mappable TTPs are provided to enable a hunt or detection rule at this time.
- Leader — Learn: Candiru commercial spyware targeting a major media organization via zero-click ads signals ongoing risk to high-profile or politically sensitive organizations; relevant context for briefings if your sector is a plausible target.
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.