AdFection: How mercenary spyware invades victims’ devices through targeted advertising

AdFection represents a dangerous evolution in spyware delivery, exploiting the trusted infrastructure of online advertising to silently compromise devices without any user interaction. A front company, Discover-Tech, masqueraded as a legitimate ad broker to funnel device traffic toward known spyware operators like Candiru, effectively weaponizing the programmatic advertising supply chain. This matters because it bypasses conventional security awareness training — users cannot protect themselves by avoiding suspicious links or attachments when the attack vector requires zero clicks. High-value targets including journalists and government agencies were exposed, demonstrating that no sector is immune when adversaries exploit trusted third-party ecosystems. The incident underscores a critical blind spot: organizations rarely scrutinize the ad networks their browsers silently contact on every page load.