Predator spyware uses new infection vector for zero-click attacks

The report reveals that Intellexa's Predator spyware uses a novel zero-click ad-based delivery mechanism called 'Aladdin' that can infect targeted mobile devices simply by serving weaponized ads to identified public IPs via a global ad-tech chain; the findings are drawn from leaked Intellexa internal documents and corroborated by Amnesty International, Google, and Recorded Future, and also note other vectors (Triton, Thor, Oberon) and zero-day baseband exploits affecting Samsung Exynos—mitigations suggested include blocking ads and enabling platform hardening features.