Researchers identify zero-click spyware distributed via online ads

Researchers have uncovered a sophisticated spyware campaign that utilizes the digital advertising ecosystem to infect mobile devices. The operation, referred to as AdFection, involves the delivery of malicious software through targeted advertisements. This method allows attackers to compromise devices without requiring any interaction from the user, a technique known as a zero-click exploit.

The campaign has been linked to an Israeli-registered advertising firm that reportedly maintained connections to servers associated with a spyware developer. By leveraging the infrastructure of online advertising, the attackers are able to deploy malware to specific individuals as they browse the internet or use various mobile applications.

Zero-click attacks are considered particularly dangerous because they do not rely on the victim clicking a link or downloading a file. Previous instances of such exploits have typically targeted vulnerabilities within messaging and communication applications. The emergence of AdFection marks a significant shift, as it demonstrates the integration of these high-level hacking capabilities into the broader, sprawling network of digital advertising.

Dozens of devices have already been identified as victims of this campaign. Because the infection process occurs in the background, users typically notice no signs of a compromise. This lack of visible indicators makes the threat difficult for the average person to detect or prevent through standard security practices.

The discovery highlights a growing convergence between sophisticated mercenary spyware and the automated systems that power online ads. Experts note that this development underscores the urgency of addressing security risks within the digital advertising supply chain, as it provides a new, highly effective vector for unauthorized access to private mobile data.