for everyone · November 4, 2026

The ad is watching you

You didn't click, you just saw an ad. According to Citizen Lab, that was enough for spyware.

The report came out on October 15. At Al Jazeera, at least 45 devices were targeted.

In short

According to Citizen Lab's 15 October report, spyware can be delivered just by a targeted ad appearing on screen; no click is needed. Reset your advertising ID and turn off ad tracking; if you're a journalist or lawyer, turn on Lockdown Mode on iPhone.

Today's script

You didn't click, you just saw an ad. According to Citizen Lab, that was enough for spyware. The report came out on October 15. At Al Jazeera, at least 45 devices were targeted. The code in the ad sends the phone's advertising ID and IP address to a server. If you're on the list, the attack code arrives. If you're not, nothing arrives and the ad looks clean. The report is clear: the targeted ad only has to appear on screen. You don't need to tap it. Citizen Lab's advice: reset your advertising ID and turn off ad tracking. Here's the path on iPhone. On Android: Settings, Privacy, Ads. Tap Delete advertising ID. If you're a journalist or a lawyer, turn on Lockdown Mode on your iPhone. Apple built it for exactly these attacks. If you have a journalist or lawyer friend, send them this video. Tomorrow: an agent recommended a package. That package never existed.