ASSESSED// Citizen Lab 2026v1.0
What We Still Don't Know About AdFection
A research agenda of the most important unresolved questions about AdFection. This page is updated as answers emerge in public research.
- Published
- 2026-10-15
- Last reviewed
- 2026-10-18
- Last updated
- 2026-10-18
- Evidence
- ASSESSED
?What exploit chain was used in the documented AdFection compromises?
?Was the exploit zero-day or N-day?
?Were mobile implants successfully delivered?
?How many devices were actually compromised versus targeted?
?Who operated the individual campaigns?
?How widespread are similar advertising-based infection systems?
?Are other commercial spyware vendors using equivalent infrastructure?
?What targeting identifiers are most frequently used?
?How should advertising platforms detect target-conditioned code?
?How can browsers isolate advertisement JavaScript more effectively?
?How should enterprises treat programmatic advertising as an attack surface?
Last updated 2026-10-18
