Source Library: Primary Research on AdFection, Candiru & DevilsTongue
A searchable library of the primary research publications underpinning this knowledge base, with abstracts, dates, related entities, and external links.
- Published
- 2026-10-15
- Last reviewed
- 2026-10-18
- Last updated
- 2026-10-18
- Evidence
- CONFIRMED
Primary investigation documenting AdFection as the first public technical confirmation of zero-click mercenary spyware delivered through targeted advertising.
Advertising-security research into target-conditioned ad delivery.
Documents Intellexa's advertising-based delivery concept predating AdFection confirmation.
Infrastructure intelligence and identification of the Integrity Labs corporate identity.
Documents Candiru-linked exploitation of a Chrome/Android V8 heap buffer overflow in 2022.
Adds Candiru (Saito Tech) to the Entity List restricting U.S. exports.
First public technical exposure of the Candiru spyware vendor and its infrastructure.
Microsoft's technical analysis of the DevilsTongue Windows implant and the SOURGUM actor designation.
Independent corroboration of Candiru zero-day exploitation activity in Chrome.
Last updated 2026-10-18
