GoKawiilCitizen Lab exposes 'AdFection' spyware delivered through online ad networks
Citizen Lab researchers identified a new spyware strain, called AdFection, that can infect phones and computers simply by displaying an ad, without any click required. The tool was built by Israeli firm Discover-Tech and used to target journalists and staff at Al Jazeera, NATO, the European Commission, NVIDIA and Arm, according to the report. Google has since suspended Discover-Tech from its ad platforms after a joint investigation with Citizen Lab and Confiant.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings suggest the real-time bidding systems underlying online advertising can be exploited to de-anonymize and target specific individuals with spyware at scale, which could raise concerns about the security of ad exchanges used across the web. Citizen Lab's description of Discover-Tech as a 'bridge' to the mercenary spyware market indicates commercial surveillance vendors may be embedding themselves within mainstream ad infrastructure rather than relying solely on direct messaging or app exploits. Google's suspension of the vendor shows platform operators can act once such abuse is documented, though it leaves open whether other ad networks carried the same traffic.
- AdFection spyware can infect devices via ads alone, requiring no victim click.
- Discover-Tech, an Israeli firm, allegedly built the tool and targeted Al Jazeera, NATO, the EU Commission, NVIDIA and Arm.
- Google suspended Discover-Tech from its ad platforms following the Citizen Lab and Confiant investigation.
YubiKey 5C NFC Security Key — With spyware increasingly exploiting ad networks for zero-click attacks, hardening your account security is more important than ever. A YubiKey adds a physical layer of two-factor authentication that phishing and malware can't easily bypass, giving you extra peace of mind against sophisticated intrusion attempts like AdFection.
See YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: engadget.com — Steve Dent, 2026-10-15
Published there as: “CitizenLab details new spyware triggered by online advertising”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.