'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery

Spyware vendors are abusing targeted ad bidding to identify and track specific individuals and organizations. The scheme, dubbed AdFection, delivers spyware through ad impressions without requiring a click.

• Attack abuses ad auction targeting to find victims
• Infection occurs on ad impression, no click needed
• Specific individuals and organizations are targeted