AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware

A new report from The Citizen Lab reveals a sophisticated surveillance operation dubbed 'AdFection,' which exploits the digital advertising ecosystem to deliver zero-click mercenary spyware. By manipulating targeted advertising networks, threat actors are able to inject malicious payloads into devices without requiring any user interaction. This method bypasses traditional security measures by leveraging legitimate ad-serving infrastructure to facilitate the delivery of spyware. The research highlights the growing danger of weaponizing ad-tech platforms, which are increasingly being used as a covert delivery mechanism for high-end surveillance tools. The findings underscore the urgent need for ad-tech companies to implement more rigorous verification processes to prevent their networks from being abused by spyware developers. This discovery marks a significant evolution in the tactics used by mercenary firms to target individuals globally, posing a severe threat to digital privacy and security.