Skip to content
On Sale AdFection Full Tech : 1 BTC. Includes Full Source Codes, Technical Blueprints, Exploits
ADFECTION.RESEARCH
Threat Intelligence Knowledge Base · Last reviewed 2026-10-18

AdFection

Zero-Click Spyware Delivered Through Targeted Advertising

Technical intelligence on AdFection, Candiru, DevilsTongue, Discover-Tech and the weaponization of the programmatic advertising ecosystem. Independent research, infrastructure analysis, detection guidance and continuously updated documentation of advertising-enabled mercenary spyware. Full source codes and technical blueprints, including zeroday exploits available for 1 BTC.

Explore AdFection Candiru SpywareDevilsTongue AnalysisView IOCs
// research snapshotCONFIRMED// Citizen Lab 2026
First publicly documented
October 2026
Primary spyware connection
Candiru / Integrity Labs
Windows implant
DevilsTongue
Advertising infrastructure
Discover-Tech
Targeting platform
Controlium
// key figures
~4 BILLION
advertising-bid records analyzed in Citizen Lab's 2026 investigation
75,373
mobile applications where relevant ads were reported displayed
120,768
websites where relevant ads were reported displayed
45+
Al Jazeera devices reported targeted in the 2024–2025 attack series
305
historically identified Candiru-validator domains matching the reported V1 fingerprint
319
associated historical IP addresses
// knowledge base
Attack Chain
How targeted ads became a zero-click delivery vector.
Open
Latest Intelligence
Continuously updated AdFection and Candiru reporting.
Open
Key Findings
The Al Jazeera 2024–2025 attack series case study.
Open
Candiru Profile
Corporate history, infrastructure and attribution.
Open
DevilsTongue Profile
Architecture, capabilities and detection of the Windows implant.
Open
IOC Database
Searchable defensive threat-intelligence indicators.
Open
CVE Database
Documented Candiru-associated vulnerability history.
Open
Research Timeline
From 2014 corporate history through October 2026.
Open

What is AdFection?

AdFection is the name Citizen Lab gave to a zero-click mercenary-spyware delivery technique, first publicly documented in October 2026, in which targeted online advertising infrastructure was used to identify selected devices and route them toward Candiru spyware infection infrastructure. It is the first public technical confirmation that the programmatic advertising ecosystem can be used as a delivery pipeline for mercenary spyware.

Read the complete AdFection technical guide
SYSTEM ONLINE — SECURE CHANNEL

Professional

Spy Phones

ZERO-CLICK

Spyware

Android phones and iPhones Zero Day Spyware for remote surveillance, lawful interception, Parental Control and MDM corporate compliance monitoring — the ultimate Zero-Click Spyware for authorized investigative and cyber intelligence operations.

Professional Spy Phones — Zero-Click Spyware
DEVICE STATUS: ACTIVE