"Zero-click" means that users don't need to click on a link or actively do anything for their devices to be targeted with spyware.
"The moment [the ad] is rendered, their device can be hacked, so there's really no defence against this, short of not using a smart phone or [not] connecting to the internet," . Such infections can be hard to detect.
When spyware is implanted, the operator behind the hack can take control of the device. "They can turn on the camera, turn on the microphone, and track someone's geolocation, so it's kind of like God-like capabilities,"
----------------------------------
Discussion on grapheneos forum regarding this. Posted 5 days ago: