In a report by Tech Radar, a new and concerning zero-click spyware campaign was uncovered, which targets journalists and operates by delivering malware through online advertisements without requiring any user interaction. This sophisticated attack method allows for the silent infection of devices, posing a significant threat to sensitive data.
Researchers identified a novel spyware campaign, dubbed "AdFection," that infects devices through online advertisements without any user interaction. The malware, developed by Israeli firm Candiru (now Integrity Labs), is capable of stealing a wide range of sensitive information, including files, credentials, messages, audio, and video, by capturing keystrokes, screenshots, and utilizing device microphones and cameras. The delivery mechanism for this spyware allegedly involved the ad-tech infrastructure of another Israeli company, Discover-Tech. This operation has been linked to the compromise of at least 45 devices belonging to Al Jazeera journalists in 2024 and 2025. The ad-tech company Discover-Tech, which presented itself as a legitimate business, is suspected by researchers to be a front for large-scale cyber-espionage. Discover-Tech's ads were reportedly served through its demand-side platform, potentially exposing numerous users and organizations to this threat. Evidence suggests that Discover-Tech's ads also appeared on networks used by entities such as the Pentagon, the United Nations International Atomic Energy Agency, and the International Criminal Court, raising serious implications for data security across various critical sectors.
Source: Tech Radar
