What’s the difference between “zero-click” and “zero-day”?

Zero-click attacks compromise a device without requiring any user interaction — no clicking links, opening attachments, or downloading files. A zero-day exploit, by contrast, refers to a software vulnerability that developers are unaware of or haven’t patched yet. Attackers exploit the flaw before a fix is available, leaving defenders with “zero days” to prepare.

Can a zero-click attack happen over a regular phone call?

Yes, zero-click attacks can hack regular phone calls, although it’s less common than messaging-based attacks. Phones automatically process certain call-related data, such as caller information and audio protocols, before the user answers. Attackers may exploit vulnerabilities during this process to compromise a device without requiring the victim to pick up the call.

Who is most at risk from zero-click attacks?

Zero-click attacks are typically expensive and technically sophisticated, so they are most often used against high-profile targets such as journalists, activists, politicians, dissidents, and business executives. While ordinary users are less likely to be targeted directly, the underlying vulnerabilities can still affect mainstream devices and apps.

Can antivirus software detect zero-click exploits?

Security software may not detect the exploit itself before compromise, but it can help identify suspicious behavior, malware activity, or unauthorized changes that occur afterward. Modern cybersecurity tools increasingly rely on behavioral analysis and AI-assisted detection to help limit the impact of sophisticated attacks.

What is a zero-click attack? Examples, risks + protection

Get Norton 360 Deluxe

2025

Consumer

Security Innovator

2026

Top Rated Product

Copyright © 2026 Gen Digital Inc. All rights reserved. Gen trademarks or registered trademarks are property of Gen Digital Inc. or its affiliates. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play, and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple, and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of Amazon.com, Inc. or its affiliates. Microsoft and the Windows logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.

About Gen Newsroom Partner with us Careers Legal Privacy Security Terms of Use Accessibility Services status Your privacy choices

Creating your recommendation

Around 30% of phishing emails are opened.

More than 130 million Americans have been affected by cybercrime.

Your personalized matches

Best choice

Better choice

Good choice

Contents

Want more?