Israeli Firm Develops Zero-Click Attack Malware

An Israeli technology company has created a cyberattack method that requires no action from the victim. The malicious software infects computers and phones simply by loading a webpage or updating an application.

The attack was identified after devices belonging to media professionals showed abnormal behavior. The investigation revealed that forty-five devices were targeted by the tool in June 2025. The software allowed for the theft of private data and the transmission of this information to external servers.

Researchers at Citizen Lab, an academic unit based in Canada, identified the company Candiru as responsible for the operation. The group used digital ads purchased by an entity called Discover-Tech to distribute the malicious code silently.

Digital security experts classify this advancement as a worrying global threat. The ability to conduct micro-targeted surveillance without the user noticing any suspicious activity raises the risk level for data privacy worldwide.

The vulnerability landscape for mobile devices and personal computers increases the perception of systemic risk to financial information security. The instability generated by cybersecurity flaws may influence the volatility of digital assets and trust in global network infrastructure.