Lessons Learned From 'AdFection' and What To Do Next
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Citizen Lab researchers exposed "AdFection," a spyware campaign that used the ad-tech ecosystem to deliver zero-click malware to journalists' devices, including Al Jazeera's. An ad served to a targeted device ran JavaScript that contacted a server which returned a malicious payload only to matching machines.