Your Phone Can Get Hacked Just by Seeing an Ad, National CERT Warns - ProPakistani

Your phone can be infected with spyware simply by loading an online advertisement, without you clicking anything, the National Cyber Emergency Response Team (National CERT) has warned.

In its latest advisory, National CERT said attackers are exploiting online advertising networks to target mobile devices. Users do not need to click a suspicious link, open an attachment, or take any action for the attack to work.

The advisory highlighted a technique known as “AdFection.” It lets attackers misuse digital advertising systems to profile users and deliver mercenary spyware through ads shown on websites and mobile apps.

The warning is based on research published by Citizen Lab on October 15, 2026. The same research found that Pakistan was among the most targeted countries in the ad-based spyware campaign.

According to the advisory, Citizen Lab documented a high-confidence finding that devices at Al Jazeera were targeted and infected with Candiru spyware using this method.

The attack may involve delivering malicious code through ads, picking out selected devices, and exploiting flaws in browsers, apps, or operating systems to gain access.

However, National CERT clarified that simply seeing an advertisement does not confirm that a device has been targeted or compromised.

National CERT warned that a successful infection could expose private communications, photos, files, account passwords, and other sensitive data.

It also flagged risks of unauthorized surveillance, device takeover, and leaks of government, corporate, research, and media-related information. The actual damage depends on the flaws exploited, the device’s software version, and the spyware’s capabilities.

Organizations were advised to consider ad-blocking and browser-level protections, preserve security logs, strengthen device monitoring, and seek specialist digital forensics help in suspected cases.

The agency, which recently warned staff about another security risk, said credible signs of spyware activity or targeted cyber incidents can be reported through its official incident-reporting mechanism.

Get the latest tech news, telecom insights, and product launches wherever you prefer.

See more ProPakistani stories in Google Search and Top Stories.