🚨Mercenary Hackers Use Ads to Install Malware on 45 Devices
Mercenary hackers used ads to infect 45 devices with malware
TL;DR
Mercenary hackers used ads to install sophisticated malware on 45 devices at Al Jazeera. The campaign, named AdFection, targeted iOS and Android devices. Google and IAB Europe removed Discover-Tech, the ad provider, from their registries.
Mercenary hackers have used ads to install sophisticated malware on 45 devices at Al Jazeera. This is the first confirmed case of zero-click mercenary spyware delivered through targeted ads. The campaign, named AdFection, worked on both iOS and Android devices. Discover-Tech, an Israeli company, facilitated the attack by brokering a bidding process between advertisers and mercenary spyware partners. The malware was developed and distributed by Candiru (rebraked as 'Integrity Labs'). Google and IAB Europe have removed Discover-Tech from their ad vendor registries. This incident highlights the risks of ad-based attacks and the need for robust security measures.

Key Points
Mercenary hackers used ads to install malware on 45 devices at Al Jazeera in 2024 and 2025.
Discover-Tech, an Israeli company, obtained over 4 billion bidding records from advertisers.
The ads were displayed in over 70,000 mobile apps and more than 120,000 websites between March and June 2026.
Google and IAB Europe removed Discover-Tech from their ad vendor registries.
Candiru (rebranded as 'Integrity Labs') developed and distributed the malware used in the attacks.
Why It Matters
If you manage ad networks or handle user data, this is a wake-up call. The AdFection campaign exploited GDPR consent frameworks to target EU users. Security teams must review their ad vendor policies and implement stricter verification processes.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,570 builders reading daily.