From Straight Arrow · · 1m 10s
Don't click the ad might be outdated internet advice
New spyware spreads through ads without user interaction, making 'don't click' advice obsolete.
In brief
New spyware spreads through ads without user interaction, making 'don't click' advice obsolete. Spyware can infect devices through legitimate ads without user action, rendering 'don't click the ad' advice outdated. Originally reported by Straight Arrow.
Adfection spyware threat
New spyware spreads through legitimate ads without user interaction, making 'don't click' advice obsolete.
“adfection”
How adfection works
Ads from Discover-Tech harvest user data when displayed, enabling automatic spyware delivery without clicks.
“mass-profile and deanonymise”
Spyware delivery method
Controlium uses JavaScript embedded in ads to send malicious code to targeted devices without user action.
“mercenary spyware”
Affected users
45 Al Jazeera journalists and staff infected with spyware through Discover-Tech ads.
“Candiru”
Global reach
Spyware delivered to users in Yemen, Brazil, Mexico, Czechia and government networks worldwide.
“millions of users”
Government networks
U.S. Department of Defense and NATO networks exposed to Discover-Tech ads with potential targeting.
“international criminal court”
Security implications
Researchers warn ad ecosystem enables mass targeting without detection for years.
“security threat”
What happens next
Cybersecurity experts urge ad platforms to implement stronger user data protection measures.
“security threat”
At a glance
Spyware can infect devices through legitimate ads without user action, rendering 'don't click the ad' advice outdated.
