OTX Threat: Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware

This investigation reveals the first public confirmation of zero-click mercenary spyware delivered via targeted advertisements, termed AdFection. Devices at Al Jazeera were infected with Candiru spyware through malicious ads purchased by Israeli company Discover-Tech, which operates as a facilitator for mercenary spyware partners. Discover-Tech's Controlium platform enables partners to de-anonymiz CVEs: CVE-2021-21166, CVE-2021-33742, CVE-2021-33771, CVE-2021-30551, CVE-2021-31979 Sectors: Media