Zero-Click Spyware Delivered via Targeted Ads: AdFection
Citizen Lab researchers have identified 'AdFection,' a new zero-click spyware delivery method that uses targeted online advertisements to infect devices. The report links this technique to the Israeli company Discover-Tech, which allegedly facilitates surveillance for mercenary spyware vendors like Candiru.
Why it matters
This discovery highlights a significant cybersecurity vulnerability where the digital advertising ecosystem is being weaponized to bypass traditional security measures, posing a global threat to privacy and digital safety.
This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. We call the technique AdFection, and show how it was used to infect devices at Al Jazeera with Candiru’s spyware. We also uncover Discover-Tech, and show how the company helps mercenary surveillance vendors track and hack devices around the world.
Bill Marczak , Wolfie Christl , John Scott-Railton , Astrid Perry , Siena Anstis , and Ron Deibert
Also covering this story
3 other newsrooms covered this event. We read each version separately.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in