Zero-click attack