A new type of spyware dubbed "AdFection" is infecting phones and computers via global online advertising networks, according to a new report from Citizen Lab. The attack is unique in that it can infect devices just by showing an ad, with no need for the victim to click on a link or file. The researchers said that AdFection is the first confirmation of zero-click government-backed spyware attacks being delivered through online ads.
The ad-infiltrating technology was reportedly developed by Israeli company called Discover-Tech. Researchers said it has been used to target journalists and staff at the Al Jazeera news network, along with officials and employees at organizations including NATO, the European Commission, NVIDIA and Arm.
"Discover-Tech has leveraged the advertising ecosystem for years to turn trusted websites and popular apps into a zero-click spyware delivery platform," Citizen Lab senior researcher Bill Marczak told The Financial Times. Discover-Tech presents itself as a legitimate advertising firm but instead serves as a "bridge between ad vendors and the mercenary spyware ecosystem," Citizen Lab's report states
Google was among the major ad platforms targeted by the spyware, but it has now suspended Discover-Tech from its global vendor list. "Following a joint investigation with Citizen Lab and Confiant, Google blocked Discover-Tech from our ad platforms for systematically violating our policies," the company said in a statement.
Targeted online advertising is a highly desirable medium to spread malware because it's prevalent on the web globally. It works though an automated real-time bidding auction system that lets advertisers compete to show ads to specific internet users.
Source link







