Researchers Detail Zero-Click Spyware Delivery Through RTB Ads

Citizen Lab claims technical proof of zero-click spyware delivery through RTB ads, with targeting based on ad ID and IP; ordinary recipients may see no payload. Follow-up coverage says Discover-Tech gave groups including US-blacklisted Candiru access to major ad platforms, but adds little technical detail; ad sightings do not establish infection, and reported reach figures vary. Platform controls and supply-chain accountability remain key questions.