aiqbench analysis
This article details "AdFection," a zero-click spyware delivery mechanism where merely viewing targeted ads triggers infection via embedded JavaScript in real-time bidding systems. The research highlights how advertising infrastructure can be weaponized to bypass traditional user interaction requirements, posing a significant new threat vector for device security and privacy.
Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal
Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading a file, or seeing any warning. Citizen Lab researchers documented what they call the first public technical proof of zero-click mercenary spyware delivered through targeted ads. The method, named “AdFection,” infected devices at international news […] The post Just Viewing an Online Ad Can Infect Your Device With Spyware, Researchers Reveal appeared first on Cyber Security News.
Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading a file, or seeing any warning. Citizen Lab researchers documented what they call the first public technical proof of zero-click mercenary spyware delivered through targeted ads. The method, named “AdFection,” infected devices at international news network Al Jazeera with spyware linked to Israeli vendor Candiru, which now operates as Integrity Labs. According to the Citizen Lab investigation, published on October 15, 2026,…
Excerpt shown under the publisher's RSS terms · 82 words · full text and figures are on the publisher's site
Related coverage
Governments are hacking people with ‘zero-click’ spyware by showing them online ads
TechCrunch · Oct 15, 2026
An Israeli firm is sending spyware through online ads, researchers say
The Verge · Oct 15, 2026
Iranian Hackers Use Fake MRI Results to Infect Victims With CHOSEN BRICK Spyware
Cybersecurity News · Sep 16, 2026
XWorm Malware Can Spy Through Your Microphone and Hijack Logged-In Browser Sessions
Cybersecurity News · Oct 13, 2026