{
  "id": 14835438,
  "title": "No click required: How the ad industry became a pipeline for mercenary spyware",
  "url": "https://urgent.news/2026/10/16/no-click-required-how-the-ad-industry-became-a-pipeline-for-mercenary",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-16T01:04:13.000Z",
  "source": {
    "name": "Computerworld",
    "slug": "computerworld",
    "url": "https://www.computerworld.com/article/4236153/no-click-required-how-the-ad-industry-became-a-pipeline-for-mercenary-spyware-2.html"
  },
  "original_language": "en",
  "account": "The ad industry has evolved into a network for mercenary spyware, dubbed \"AdFection,\" which exploits online advertising platforms to track users without their knowledge, according to researchers at The Citizen Lab. This zero-click spyware can install malware on devices simply by displaying ads. One key player in this scheme, Discover-Tech, runs a platform called Controlium that allows cybercriminals to profile and de-anonymize millions of users while automatically infecting their devices when an ad is displayed. Despite masquerading as a legitimate ad company on major platforms like Google and IAB Europe, Discover-Tech's ads have been shown on nearly 200,000 unique websites and apps in dozens of countries. Major ad networks, including Google, Yandex, and Beeswax, have also displayed Discover-Tech's ads. The researchers disclosed their findings to these companies, which took action to disconnect Discover-Tech. However, the issue lies in the online advertising system's weaknesses, which failed to detect or prevent this abuse. AdFection takes advantage of real-time bidding auctions hosted by ad exchanges, where ads containing images, video, and malicious code are bid on and shown in split seconds. Data about specific users and devices is shared across exchanges, allowing advertisers to target individuals based on device identifiers and other characteristics. Discover-Tech has infiltrated and connected the spyware industry to this online ecosystem, enabling them to silently infect devices. While not every ad impression leads to infection, the fact that Discover-Tech has been able to bid on and show ads across extensive ad networks highlights a systemic risk that requires urgent investigation.",
  "summary": "That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you having to do a thing. This “zero-click mercenary spyware,” dubbed “AdFection,” is increasingly exploiting a sprawling online advertising ecosystem ripe for abuse, according to researchers at The Citizen Lab . One top actor in the space,…",
  "key_points": [
    "Ad industry becomes network for mercenary spyware called AdFection",
    "Discover-Tech runs Controlium platform for cybercriminals to profile users",
    "Major ad networks like Google and Yandex displayed Discover-Tech's ads"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}