Just when we thought the targeted ads couldn’t get any worse, we discovered they contained malware.

• Researchers discovered a no-click spyware campaign delivered through online ads, which required no user interaction.
• Journalists’ devices were infected with surveillance malware capable of stealing data, messages, audio and video
• The investigation linked the operation to Israeli companies linked to advertising technology infrastructure and commercial spyware.

Picture this: you are a journalist. You get to work, log on to your computer, and go about your daily activities. While browsing the Internet, you see an ad for headphones. You don’t click on the ad, you don’t even look at it with interest. You simply display it, like any other ad on the internet, and scroll on to continue with your day.

But the moment the ad was published, his computer was infected with a powerful information stealer. The malware collected all types of sensitive data, including files, documents, cookies, bookmarks, and even saved credentials. It captured your keystrokes, took screenshots while you worked, and was even able to use its microphone and camera to record you while you worked.