Today's script
You didn't click, you just saw an ad. According to Citizen Lab, that was enough for spyware. The report came out on October 15. At Al Jazeera, at least 45 devices were targeted. The code in the ad sends the phone's advertising ID and IP address to a server. If you're on the list, the attack code arrives. If you're not, nothing arrives and the ad looks clean. The report is clear: the targeted ad only has to appear on screen. You don't need to tap it. Citizen Lab's advice: reset your advertising ID and turn off ad tracking. Here's the path on iPhone. On Android: Settings, Privacy, Ads. Tap Delete advertising ID. If you're a journalist or a lawyer, turn on Lockdown Mode on your iPhone. Apple built it for exactly these attacks. If you have a journalist or lawyer friend, send them this video. Tomorrow: an agent recommended a package. That package never existed.

