Citizen Lab research reveals an operation dubbed 'AdFection' that weaponized targeted advertising platforms as a delivery pipeline for zero-click mercenary spyware, bypassing the need for user interaction. The exploit chain uses personalized ads to surreptitiously install surveillance tools on victims' devices, marking a concerning evolution in how ad infrastructure can be co-opted for espionage.
Background
Citizen Lab is a well-known digital forensics lab at the University of Toronto that regularly publishes research on commercial spyware and state-sponsored surveillance. Mercenary spyware like Pegasus has previously been delivered via phishing or exploited vulnerabilities, but this represents a novel abuse of advertising infrastructure.
- Source
- Hacker News (RSS)
- Published
- Oct 15, 2026 at 06:43 PM
- Score
- 8.0 / 10