Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware

The 'AdFection' technique exploits trusted third-party advertising infrastructure to deliver commercial spyware without any user interaction, bypassing traditional phishing and social engineering defenses. By compromising or co-opting a legitimate ad network (Discover-Tech), attackers gained a stealthy, pre-approved delivery channel into high-value organizational networks including Al Jazeera, NATO, and the UN. This highlights the critical risk of implicit trust granted to third-party content delivery systems — ad networks represent a largely unscrutinized supply chain vector embedded in everyday browsing. The zero-click nature of the attack means conventional security awareness training provides no protection, making technical controls and supply chain vetting essential. Organizations that fail to treat advertising and analytics scripts as potential threat vectors leave a significant blind spot in their security posture.