Targeted ads delivered 0-click exploits to install mercenary malware

A targeted ad campaign has been identified as delivering 0-click exploits that install mercenary malware, marking a likely first confirmation of such a tactic. The malicious ads were served by a network of compromised websites, which were used to distribute the malware. The malware was designed to compromise mobile devices, and the campaign was likely carried out by a nation-state actor or a sophisticated cybercrime group.