Top Tweets for #AdFection
•Post reveals Discover-Tech, an Israeli ad tech firm previously linked by Citizen Lab to zero-click Candiru spyware delivery via targeted ads (#AdFection), is the top bidder for Starlink ad impressions in 105 countries.
•TrendAI research identifies the same entity (SHADOW-EARTH-79) conducting heavy surveillance via real-time bidding, profiling Starlink users’ devices, locations, and behavior with 4.9x over-representation in bids on SpaceX’s AS14593.
•Investigation shows ad ecosystem abuse enabling global tracking and potential spyware in sensitive networks, prompting removals by Google and others following Citizen Lab and Confiant reports.
UPDATE: Israeli company we caught delivering zero-click infections is #1 bidder on Starlink ads in 105 countries.
Data from @trendai_RSRCH suggests worldwide surveillance op targeting @Starlink users. 1/
By @razhael
https://t.co/uWFzemhgnL
Israel spyware firms hacked into Al Jazeera devices in 2024 using a new ‘adfection’ method previously unknown to the public. The ‘zero click’ hacks can infiltrate your phone or computer simply by scrolling past an ad online.
Al Jazeera’s @mohamedwashere explains.
Raff has time to talk about alleged CCP linked hackers, but he is yet to acknowledge Israeli spyware targeting ANSTO. Incredible. Australia is such a joke. #AusPol #AdFection
🔐 October is Cyber Security Action Month, and staying safe online starts with simple steps like updating your software, using strong passwords and turning on multi-factor authentication.
The Australian Signals Directorate received more than 84,700 cybercrime reports in 2024-25, highlighting why cyber security is everyone's responsibility.
In my regular spot on 2CC, I spoke about the growing threat of cybercrime and the simple steps we can all take to better protect ourselves online. 🛡️
#auspol #cybersecurity
#Adfection: "Firmen (nutzen) gezielte #Werbeanzeigen, um #Spionagesoftware auf Smartphones zu installieren. Diese Infektion kann ohne jede Interaktion der Betroffenen erfolgen – Klicks auf Links oder Bilder sind dafür nicht mehr erforderlich." https://t.co/xVWUtQz0G7
【表示だけで感柩!?】「怪しい広告は開かなければ安全」という常識が崩壊！広告バナーが表示されただけでスパイウェアが入る「AdFection」が暴露されReddit大炎上。仕組みのヤバさと今すぐできる自衛術を解説！ https://t.co/5J7GJt4tsW #セキュリティ #AdFection #AdBlock
I'm sharing my copy of the S3 bucket from Discover-Tech --> https://t.co/UkRgCMHMlG #AdFection
Citizen Lab exposes the AdFection spyware attack, a zero-click ad-bidding exploit that targeted at least 45 Al Jazeera devices.
#AdFection #Spyware #CitizenLab #Candiru #DiscoverTech #ZeroClick #AlJazeera #AdTech
https://t.co/oR5o7XnXlM
🚨 CyberRakshakLabs (https://t.co/2pavVsqatQ) — Incident Summary
🚨 ZERO-CLICK ATTACKS: TARGETED ADS USED TO DELIVER CANDIRU SPYWARE
#CyberRakshakLabs #CyberSecurity #Candiru #ZeroClickAttack #ZeroClick #Spyware #AdFection #MobileSecurity #ThreatIntelligence #CyberAwareness
🚨 CyberRakshakLabs (https://t.co/2pavVsqatQ) — Incident Summary
🚨 ZERO-CLICK ATTACKS: TARGETED ADS USED TO DELIVER CANDIRU SPYWARE
#CyberRakshakLabs #CyberSecurity #Candiru #ZeroClickAttack #ZeroClick #Spyware #AdFection #MobileSecurity #ThreatIntelligence #CyberAwareness
Israeli Ad Firm Built a Spyware Pipeline Inside the Online Advertising System, Researchers Say www.cysecurity.news/2026/10/israeli-ad-firm-built-spyware-pipeline.html #AdFection #Advertisements #AlJazeera
Berichten deutsche Medien über #Adfection, oder hindert die Staatsräson sie auch hier daran, ihrer Verantwortung gegenüber den Bürgern nachzukommen?
🚨 WARNUNG: Israelische Firmen haben Werbung zur Verbreitung von Zero-Click-Spyware missbraucht!
Manipulierte Anzeigen erschienen in 75.373 Android-/iOS-Apps, darunter Duolingo, WetterOnline, Yahoo Mail, Badoo und Viber.
‼️ Breaking: First-ever Zero-Click Mercenary Spyware Delivered via Targeted Ads
Details: https://t.co/OWlUptCmGp
Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading a file, or seeing any warning.
Citizen Lab researchers documented what they call the first public technical proof of zero-click mercenary spyware delivered through targeted ads.
The method, named “AdFection,” infected devices at international news network Al Jazeera with spyware linked to Israeli vendor Candiru, which now operates as Integrity Labs. For users and organizations, the case shows that careful clicking alone cannot stop every infection.
#cybersecuritynews
Exposing #AdFection
How Discover-Tech Turned Targeted #Ads Into a Pipeline for Zero-Click Mercenary Spyware #Candiru
https://t.co/4cW3ugNpNc
ad bidding & How Discover-Tech Deploys Ads in the Browser
To Catch a #Predator: Leak exposes the internal operations of #Intellexa’s mercenary spyware
Intellexa’s Predator employs advanced infection vectors for mobile devices, including 1-click exploits via malicious links targeting Chrome (Android) and Safari (iOS) vulnerabilities, tactical tools like Triton (Exynos baseband exploit) for proximity-based attacks, and strategic zero-click methods such as Mars/Jupiter (ISP-injected links) and Aladdin (malicious ads via IP targeting in ad ecosystems).
Data exfiltration captures encrypted messages (e.g., Signal, WhatsApp), audio, locations, and credentials, relaying them through multi-layer anonymization chains to customer backends using AES/RSA encryption and throttled uploads based on device battery/network status.
Command-and-control infrastructure features on-premises servers (infection, CNC, dashboards like PDS/CyOP) accessible remotely via TeamViewer, with real-time logs and Elasticsearch monitoring. Evasion tactics include self-destruction (Guard module), resource throttling, certificate pinning, and obfuscated filenames (e.g., pred. so, fs.db) to mimic legitimate processes and avoid forensics.
https://t.co/B7h43ALhdq
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : https://t.co/kU2kFMTqjY
Confiant's blog: https://t.co/pX8CWAKxTi
Last Seen Hashtags on Sotwe
eunuch
Seen from Poland
骚狗
Seen from United States
türkporno
Seen from Turkey
axiouspanda(*****************************************************) or #minichat(*) or #snapchat(*)
Seen from Germany
osmaniyebayan
Seen from Turkey
sellingcontent()* filter:videos()*
Seen from Turkey
nsft filter:videos
nsfw
Seen from Turkey
discord esex()+filter:native_video
Seen from Australia
minichat
Seen from United States
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers