Citizen Lab identifies zero-click spyware attacks via digital ads

Research from Citizen Lab, a digital security unit at the University of Toronto, has identified a new cyberattack technique known as ‘AdFection’. This method exploits digital advertising systems to deploy spyware onto target devices through zero-click attacks, meaning users do not need to click on an advertisement for the infection to occur.

The report links this technique to the Israeli advertising technology company Discover-Tech. According to the findings, Discover-Tech’s ‘Controlium’ platform allows surveillance partners to identify devices, build user profiles, and target specific individuals. The company reportedly purchases advertisements that direct target devices to spyware developed by Candiru, a firm that also operates under the name Integrity Labs.

Unlike traditional attacks that require a user to interact with a malicious link or file, these zero-click attacks execute malicious code simply when the compromised advertisement is displayed on a device, provided certain technical conditions and target criteria are met.