Hackers are developing new methods to infect iPhones with spyware without requiring users to click malicious links. This advanced spyware, previously used against high-profile targets, is now being employed by everyday cybercriminals. Researchers have identified two campaigns exploiting online advertising and compromised legitimate websites to deliver this iPhone spyware. One attack occurred when an employee scrolled past an Instagram ad, automatically triggering the spyware to steal credentials and search for cryptocurrency. Another campaign affected thousands of websites after hackers bought expired domains that those sites still relied on for functionality. These attacks leverage automated processes that run as users browse, making them more insidious. The iVerify case involved malicious code executing upon ad display, checking the OS before deploying an exploit. The Report URI campaign redirected unsuspecting visitors on compromised sites to malicious software. These findings indicate a shift towards delivering spyware through routine online activities rather than traditional phishing. Cybercriminals can also selectively target vulnerable devices and operating systems. The increasing sophistication and availability of spyware pose a significant threat to mobile device security, which was once considered robust. Researchers strongly advise keeping mobile operating systems updated to mitigate these risks.