Definition
AdFection is Citizen Lab’s name for zero-click mercenary spyware delivered through targeted online advertisements: malicious or weaponized ad creatives load in a browser or in-app WebView, connect to attacker infrastructure, and install spyware without user interaction beyond normal ad impression.
Key Points
- 2026-10-15: First public technical confirmation of in-the-wild zero-click mercenary spyware via targeted ads (citizen-lab report; 2026-10-15-targeted-ads-0-click-mercenary-malware)
- Broker discover-tech operated Controlium, linking ad networks (including Google, per Reuters) to spyware vendors such as candiru (rebranded Integrity Labs)
- At least 45 Windows devices at al-jazeera infected in 2024–2025 per network-log analysis; iOS/Android also cited in secondary coverage
- Google removed Discover-Tech from its ad platforms for policy violations; Confiant published parallel ad-security research
Ad impressions alone do not prove infection — Citizen Lab distinguishes profiling/deanonymization at scale from confirmed compromises.
Related
- citizen-lab
- discover-tech
- candiru
- zero-day-vulnerabilities
- ai-cybersecurity
- ad-tech-mercenary-spyware
- web-tracking-fingerprinting