Targeted Ads Installed Candiru Spyware in Zero-Click Attacks
Targeted ads delivered Candiru spyware to Al Jazeera Media Network devices via a zero-click attack.
Intelligence analysis by Qwen 2.5 (3B)
Targeted ads delivered Candiru spyware to Al Jazeera Media Network devices in a zero-click attack, highlighting the risks of online advertising.
Bad ads on the internet can secretly trick your device into getting spyware without you knowing, and a company called Discover-Tech helped make that happen.
Analysis
{"heading":"The AdFection Attack Mechanism","subheading":"How Discover-Tech and Candiru Work Together","content":["Citizen Labs identified a new attack technique called AdFection, which involves the use of targeted ads to deliver Candiru spyware to devices.","Discover-Tech, a company that works with multiple mercenary spyware, hacking, and advertising vendors, was identified as the orchestrator of the attack.","The company used its Controlium platform to target specific devices with malicious code, embedding JavaScript in ads that contacted the NOAS server when rendered.","The NOAS server determined if a target was eligible to receive JavaScript code, and selected targets received additional code, while other devices received nothing, keeping the attacks stealthy."]}
Key points
- Targeted ads delivered Candiru spyware to Al Jazeera Media Network devices in a zero-click attack.
- Discover-Tech used its Controlium platform to target specific devices with malicious code.
- The NOAS server determined if a target was eligible to receive JavaScript code, and selected targets received additional code.
Future advertising platforms can improve their security measures to prevent such attacks.
The attack shows that even trusted companies can be involved in malicious activities, raising concerns about the advertising ecosystem.
