AdFection: how an ad platform became a zero-click spyware delivery pipeline

A targeted online ad just became another delivery channel for spyware. A new Citizen Lab investigation, conducted together with ad-intelligence firm Confiant, describes what it calls AdFection: a pipeline built around the Israeli advertising company Discover-Tech in which devices belonging to journalists, diplomats, intelligence officials, and other high-value targets were tracked through ordinary display ads and then funneled into zero-click infections delivered by mercenary spyware vendors.

The report is significant because it moves the spyware trade's delivery problem away from the user entirely. Traditional targeted spying relies on convincing a person to open a document, click a link, or accept an invitation, which is where defenses fail when the target is cautious. The AdFection pipeline instead exploits the display-advertising ecosystem itself: the same ad requests that populate a page on someone's phone or laptop are used to profile the device, confirm whether it belongs to a known target, and hand it off to exploit tooling that can install spyware without any interaction at all.

What the report found

Citizen Lab and Confiant traced how Discover-Tech operated across the commercial ad stack. The company's publicly accessible login and record data let the researchers identify which ad inventory was being served, where, and to whom. Within that inventory they found ads appearing on devices used by reporters at Al Jazeera, staff attached to the International Atomic Energy Agency and the International Criminal Court, military personnel, and national cyber agencies, with activity spanning roughly through March to June 2026. In several cases the ad was not a lure in the conventional sense: it was the carrier. The device that fetched it was already being profiled, and the ad's code path could trigger a zero-click compromise of the device's browser or runtime.

The research team links the observed activity to a cluster of commercial spyware products. Candiru, Bindecy, and Intelos are each established vendors selling advanced iOS and Android compromise tooling to intelligence agencies and private operators. The AdFection finding is that these products do not need to arrive at their target through a spear-phished message or a malicious app store download. An ad impression, delivered through standard industry pipes, can do the same job, which makes the infection far harder to detect and far more deniable.

Why the ad stack was the weak point

Display advertising depends on a web of data exchanges: ad networks, exchanges, demand-side platforms, and app-level ad SDKs all trade in device identifiers, app usage, and location-derived signals. Citizen Lab's report notes that several of the vendors and networks in the stack, including entities associated with Google, IAB Europe, Beeswax/FreeWheel, Vungle, Xandr (Microsoft), and others, supply the infrastructure that makes this pipeline possible at scale. None of those layers is malicious by itself. The danger emerges when a buyer with state-level persistence can pay to see exactly which ad pixels render on a device it has already fingerprinted, and then route that device into an exploit chain through the same request.

The researchers also connect AdFection to a wider pattern of ad-ecosystem abuse documented in earlier work, citing past incidents tied to flaws such as CVE-2021-21166, CVE-2021-30551, and CVE-2021-33742. Those cases showed that vulnerabilities in ad-related software and device code can be weaponized for surveillance. AdFection extends the pattern: instead of hunting one bug at a time, an operator can build a durable business model in which the advertising ecosystem's data flows and code paths are the surveillance channel itself.

Citizen Lab researcher Richard J. Stevens and team lead Carlo Villani have argued that this is the tip of the iceberg of a new phase in targeted spying: commercial spyware vendors now sell not just the payload but the delivery logistics, and the ad economy provides cheap, cover-story-rich plumbing for getting payloads to specific devices. Confiant's role in the joint investigation matters because it can compare observed ad impressions against its index of ad spend and creative data, giving researchers a way to spot when an unusual buyer is purchasing impressions aimed at a narrow, high-value audience.

What this means for you

• If you are a journalist, diplomat, dissident, or intelligence target, assume your device's browsing and ad exposure is being actively monitored, even offline of any deliberate browsing session.
• Zero-click ad-delivery chains weaken the value of "just don't click." Defense now depends on reducing fingerprintable exposure: ad-blockers, privacy-conscious browsers, limiting ad-SDK surface, and segmented devices for sensitive work.
• Ad industry participants face new scrutiny: exchanges, SDKs, and ad networks that process targeted impression data become potential surveillance amplifiers in state-directed operations.
• Security teams monitoring for intrusions should treat unusual ad-implication activity on a device, combined with a browser or runtime exploit, as a possible spyware delivery path rather than routine malvertising.

The practical takeaway is that the line between targeted advertising and surveillance has blurred in a way that has real consequences for the people who cannot afford to be profiled. Citizen Lab frames AdFection not as a single vendor going rogue, but as evidence of a market: commercial spyware operators are increasingly buying their delivery through the same advertising infrastructure that everyone else already trusts. That shifts the risk from the click you make to the impression that finds you.

Sources: Citizen Lab — Exposing AdFection; CyberScoop — AdFection: how mercenary spyware invades devices through targeted ads.

Corrections: Report an error at corrections@wireshaman.com.