How a Simple Ad View Can Install Spyware: The Candiru Zero-Click Threat

Michael Miller · 2026-10-16

You know that feeling when you click a link and instantly regret it? Now imagine doing absolutely nothing—just scrolling through a website—and still getting infected. That's the chilling reality of a zero-click attack, and it's exactly how Candiru spyware reportedly reached devices at Al Jazeera Media Network. No clicks, no downloads, no shady attachments. Just an ad rendering on your screen was enough. ### The attack that needed nothing from you Candiru, a notorious surveillance-for-hire outfit, allegedly used targeted online ads to deliver its spyware. The ads were served to specific devices, and the moment they loaded, the malware executed. This isn't science fiction; it's a textbook zero-click exploit. The victim didn't have to interact at all. Simply viewing the ad triggered the payload. How does that even work? It usually involves exploiting a vulnerability in the browser or the ad delivery network. The malicious ad contains code that takes advantage of unpatched flaws, allowing the spyware to install silently. Once inside, it can harvest messages, calls, location data—basically everything on the device. ### Why this matters for antidetect browser users If you're using antidetect browsers to manage multiple profiles, you already know the importance of privacy. But this attack vector is a wake-up call. Even the most secure browser can be compromised if it's not up to date. And if you're running multiple profiles, a single infection could spread across them. Antidetect browsers are designed to mask your digital fingerprint, making it harder for trackers to link your activities. But they aren't immune to zero-click exploits. That's why it's crucial to choose a browser that prioritizes security updates and sandboxing. The best antidetect browser will isolate each profile, so if one gets hit, the others stay safe. ### Protecting yourself without going off the grid You don't need to ditch the internet to stay safe. Here are a few practical steps: - Keep your browser and operating system updated. Patches close the holes that zero-click attacks exploit. - Use a reputable antidetect browser that offers regular security updates and isolated profiles. - Consider ad blockers or script blockers—they can prevent malicious ads from rendering in the first place. - Be cautious with permissions: don't grant apps more access than they need. Remember, zero-click attacks are rare but rising. The Candiru case shows that even trusted platforms can be vectors. As Michael Miller, our lead antidetect browser strategist, puts it: "The best defense is a browser that's built with security in mind, not just anonymity. You need both." So next time you see an ad, think twice. It might be more than just an annoyance—it could be a doorway. Stay safe out there.