Citizen Lab reveals AdFection — the first public zero-click spyware attack delivered via targeted online ads. Discover-Tech, an Israeli firm, operates Controlium, a platform that fingerprints devices from ad renders and delivers mercenary spyware like Candiru to targets including Al Jazeera staff.
Background
Mercenary spyware vendors such as Candiru (rebranded as Integrity Labs) and ADINT have long been linked to state-sponsored surveillance. This report marks the first technical confirmation of ad-delivery as an infection vector.
- Source
- Lobsters
- Published
- Oct 19, 2026 at 04:55 AM
- Score
- 8.0 / 10