A new type of cyberattack, described as a “zero‑click” hack, has been identified that can infect victims simply by viewing an advertisement, without any action required from the user.
Zero‑click attacks differ from traditional malware in that they do not rely on the victim clicking a link or opening a file. Instead, the malicious code is delivered through a vector that is automatically processed by the device’s software, allowing attackers to compromise systems without any user interaction.
According to reports, the latest variant uses online advertising as its delivery mechanism. When a user loads a page containing the compromised ad, the malware is triggered and can begin its activity on the device.
Security analysts warn that because the attack does not require any user behaviour, it poses a significant global threat. Devices that rely on standard ad networks or that have unpatched software could be vulnerable to this type of intrusion.
Experts recommend that organisations and individuals keep their operating systems and applications up to date, and that they employ robust ad‑blocking and endpoint protection solutions to mitigate the risk posed by zero‑click malware.
<small>Source: Al Jazeera — read the original story there.</small>
