AdFection Campaign Uses Malicious Online Ads to Deliver Candiru Spyware
Citizen Lab uncovered a zero-click surveillance campaign that utilizes online advertising networks to de-anonymize targets and deliver Candiru spyware.
FTMQ Security, written by our newsroom0 views
Israeli company Discover-Tech purchased online advertisements that were used to fingerprint users and deliver Candiru spyware, SecurityWeek reported. Citizen Lab uncovered the surveillance operation, which it named AdFection. The campaign uses zero-click attacks to infect selected targets and track millions of devices. [1]
Ad exchanges collect extensive device and user details that enable tracking, according to SecurityWeek. The ads purchased in the operation contain code designed to run directly inside a user's browser or application. Security research shows this code can de-anonymize targets and execute malicious payloads. [1]
Online advertising infrastructure has long served technology and media companies. DoubleClick developed Internet ad serving services starting in 1995 before Google acquired the firm in March 2008. Its DART product line aimed to increase purchasing efficiency for advertisers and manage publisher inventory. [2]
The AdFection operation demonstrates how malicious code embedded in standard ad impression channels can lead directly to system compromise. Security teams face ongoing threats from ad-based fingerprinting that leverages routine advertising identifiers. [1]
In short
- Citizen Lab uncovered the AdFection operation delivering Candiru spyware via online ads.
- The campaign uses zero-click attacks to fingerprint, de-anonymize, and infect targets.
- Ads purchased by Israeli firm Discover-Tech allowed hackers to track millions of devices.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery ChannelSecurityWeek, 14h ago (the report this story comes from)
Background
- [2]DoubleClick on Wikipedia
Our newsroom writes these reports with the help of software, from the 2 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Citizen Lab and WIRED detail oversight limits at spyware firm Paragon SolutionsNation State Hacking, 7d ago
More in Top Stories
- Malicious npm Package Discovered Executing Windows Shellcode Injection Campaign1h ago
- Drupal patches critical remote code execution vulnerabilities in core and module1h ago
- ConnectWise shuts cloud backup after hackers breach Microsoft 365 tenants1h ago
- More Rewards customer data accessed following server breach1h ago
- OpenAI skill repository contains hallucinated domain vulnerability affecting Render app tokens1d ago
- Researchers publish local privilege escalation exploit targeting OpenBSD 7.91d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.