# AdFection Spyware Exploits Digital Ads for Covert Surveillance

*Published October 16, 2026*
*Source: [https://cyberscoop.com/adfection-zero-click-spyware-discover-tech/](https://cyberscoop.com/adfection-zero-click-spyware-discover-tech/)*

## Executive Summary

*This is a Premium edition. The Executive Summary is available to sec-news.ai members —*
*[read it here](https://www.sec-news.ai/news/adfection-spyware-exploits-digital-ads-for-covert-surveillance) or [see plans](https://www.sec-news.ai/pricing).*

## Article

Recent findings by The Citizen Lab at the University of Toronto have revealed a concerning new threat in the form of AdFection, a zero-click spyware delivered through targeted advertising. This spyware can infect devices without any user interaction, exposing vulnerabilities in the digital advertising ecosystem. The research highlights that Discover-Tech, an Israeli company posing as a legitimate advertising firm, is facilitating this malicious activity. It collaborates with several mercenary spyware partners, including the notorious Candiru, directing millions of devices to Candiru’s servers. The spyware campaign has notably affected devices at media outlet Al Jazeera, and its reach extends to sensitive networks worldwide, including those of the U.S. Department of Defense and NATO. Investigators have found that these malicious ads were displayed on over 120,000 websites and 70,000 mobile apps between March and June of this year. The discovery raises significant concerns for regulators and the advertising industry, urging a reevaluation of how digital advertisements are monitored and secured. Google and IAB Europe have since removed Discover-Tech from their vendor lists in response to the findings. The spyware can take over devices, access microphones and cameras, and steal data, posing a significant risk to privacy and security. The report also mentions DARK CARTOGRAPHER, a mysterious threat actor exploiting Discover-Tech’s infrastructure to de-anonymize and track users, with links to a U.S. government contractor. This case underscores the urgent need for stricter regulations and oversight in the digital advertising space.