An Israeli surveillance technology firm has run a large-scale operation to infect mobile phones with spyware using online advertisements to hack the devices, researchers said on Thursday.

Here is a bit more information that might help, I posted this in privacy too.

you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 12 hours ago

Once an ad loaded, code inside it could contact a Discover-Tech server. That server decided whether the visitor was a chosen target. If the details matched, it could return JavaScript that loaded more code and began the infection process. No click was needed.

This method works because modern ads are not always simple pictures or videos. They can include code for measuring views, tracking users, and loading content from other companies.

Real-time bidding systems also share data within a fraction of a second so advertisers can decide whether to buy an ad slot. That data may include a device ID, IP address, location, and browser details. AdFection used this design to find selected devices and send code only to them, making the activity harder for ad platforms and security researchers to catch.

https://cybersecuritynews.com/0-click-spyware-infects-devices/

  • source
  • parent