Malware Campaign Named AdFection Exploits Advertising Ecosystem to Launch Zero-Click Attacks

Researchers at Citizen Lab have uncovered a new and sophisticated malware campaign known as AdFection, which exploits the digital advertising ecosystem to distribute spyware without requiring the user to click on any link or interact with the ad.

Complex Attack Mechanism and Infection Details

The campaign relies on combining malvertising techniques with zero-click attacks. According to analyses conducted on Windows devices belonging to Al Jazeera, the process begins when the browser or application receives an ad provided by a company called Discover-Tech. This ad contains a JavaScript code that executes automatically as soon as it is displayed.

This code sends detailed information about the device to the company's servers, including the Internet Protocol (IP) address and the advertising identifier associated with cookies. Once the server accurately verifies the identity of the targeted device, it responds with zero-click malicious payload data developed in cooperation with Candiru/Integrity Labs, completely penetrating the infected device without any human intervention.

Why This News Matters

This attack is extremely concerning because it does not rely solely on obscure software vulnerabilities in the operating system, but rather leverages the standard infrastructure of digital advertising companies, behavioral tracking, and Real-Time Bidding (RTB) operations. This gives the entities behind the spyware the ability to target specific individuals with extreme precision while concealing the attack's trace among millions of legitimate advertising transactions.

Essential Steps to Protect Devices

In light of the widespread reliance on behavioral advertising, experts provided several recommendations to mitigate risks and protect personal devices, especially for individuals exposed to high levels of threats:

• Applying digital security fundamentals and updating device protection settings regularly.
• Using browser extensions that limit tracking, such as Privacy Badger, or relying on network-level ad-blocking services.
• Resetting or disabling the advertising identifier on smartphones, whether for Android or iPhone.
• Switching to browsers that focus more on privacy and blocking tracking tools.