Researchers from Citizen Lab have uncovered a sophisticated spyware campaign named 'AdFection' that leverages digital ads to infect devices without any interaction from the victim. This campaign, which is believed to be the first of its kind to be documented in such detail, has targeted 45 devices at the news organization Al Jazeera. The spyware, attributed to the Israeli developer Candiru, was delivered through ads issued by Discover-Tech, an Israeli-founded marketing firm. Affected devices were found to have contacted domains linked to Discover-Tech and subsequently connected to infrastructure associated with Candiru. Google, along with Citizen Lab and the cybersecurity firm Confiant, conducted a joint investigation which led to the termination of Discover-Tech from Google's ad platforms for policy violations. The Interactive Advertising Bureau in Europe also suspended Discover-Tech from its global vendor list following an audit. Similarly, Beeswax, a digital advertising company, removed Discover-Tech from its platform due to malicious activities. This incident underscores the vulnerabilities present in digital advertising networks and the challenges in securing them against such attacks.