{"rewrite":{"id":"r_433183014ad3293a52e07a70","clusterId":"c_d88931ad2b15b52b4593ee5e","slug":"citizen-lab-details-adfection-an-ad-based-zero-click-spyware-attack-on-al-jazeera-devices","model":"deepseek-v4-1-flash","headline":"Citizen Lab Details AdFection, an Ad-Based Zero-Click Spyware Attack on Al Jazeera Devices","summary":"Citizen Lab says an Israeli advertising company, Discover-Tech, used its Controlium platform to deliver spyware to specific devices through ordinary online ads, with no click or download required. At Al Jazeera, at least 45 devices were targeted between 2024 and 2025, and some were infected with spyware made by the Israeli firm Candiru. The government or organization behind the order is not identified.","whyItMatters":"Ad delivery is built to let buyers select individual devices by advertising identifier and IP address, so the same mechanism that narrows an audience can narrow a target list, and Citizen Lab's technical evidence puts that reach on the record.","webCardHtml":"\u003cp\u003eCitizen Lab found that infected Al Jazeera devices connected to Discover-Tech\u0026#39;s server first, then reached the attacker\u0026#39;s command server through Candiru\u0026#39;s infrastructure. Attack code is not sent to devices outside the target set, which makes the delivery harder for ad-inspecting security systems to catch. Analyzing roughly 4 billion of Discover-Tech\u0026#39;s ad bidding records, Citizen Lab says the company\u0026#39;s ads appeared on about 200,000 websites and apps across dozens of countries over four months, and that millions of devices were made to connect to Candiru\u0026#39;s server through ads.\u003c/p\u003e","blueskyPost":"AdFection's Controlium platform proves ad networks deliver code without any click, which also means the tools meant to block ad tracking can double as a spyware channel.","twitterPost":"Controlium turns an ordinary ad slot into a zero-click infection path, so ad blockers and spyware now share the same delivery layer.","threadsPost":"Citizen Lab's AdFection finding puts the surveillance in the ad slot itself: Discover-Tech's Controlium platform infected devices with no click or download required, so the tracking tech that ad networks already run is the same layer that delivered spyware to Al Jazeera devices.","newsletterBlurb":"Citizen Lab has published technical evidence that Discover-Tech, an Israeli advertising company, delivered spyware to specific devices through ordinary online ads, an approach it calls AdFection. At least 45 Al Jazeera devices were targeted between 2024 and 2025, and some were infected with spyware from the Israeli firm Candiru. Citizen Lab says the government or organization that ordered the attack has not been identified.","attributionJson":"[{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20261016-adfection/\",\"title\":\"Zero-click attack \\\"AdFection\\\" confirmed to infect devices with spyware just by displaying online ads, what is the attack method used by an Israeli advertising company?\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4614,"outputTokens":616,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1792120925,"createdAt":"2026-10-16T03:16:22.000Z","publishedAt":"2026-10-16T03:21:05.000Z","updatedAt":"2026-10-16T03:21:05.000Z"},"cluster":{"id":"c_d88931ad2b15b52b4593ee5e","canonicalTitle":"ネット広告を表示するだけでスパイウェアに感染するゼロクリック攻撃「AdFection」が確認される、イスラエルの広告企業が仕掛けていた攻撃の手口とは？","representativeArticleId":"a_b589c200ffd621e268550aae","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-10-16T01:50:00.000Z","lastSeenAt":"2026-10-16T01:50:00.000Z","updatedAt":"2026-10-16T03:21:06.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20261016-adfection/","title":"ネット広告を表示するだけでスパイウェアに感染するゼロクリック攻撃「AdFection」が確認される、イスラエルの広告企業が仕掛けていた攻撃の手口とは？"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":[],"studios":[],"people":[],"type":"news","domain":"other","is_roundup":false},"keyFacts":null}