Policy & regulation
EFF: Lessons From 'AdFection' Spyware Campaign That Used Ad Networks to Target Journalists
The Electronic Frontier Foundation has commented on the "AdFection" malware campaign revealed by Citizen Lab, in which an ad network was used to deliver spyware to journalists' devices without requiring any clicks. The EFF warns the attack abuses behavioral advertising infrastructure and offers mitigation steps for all users.
EFF weighs in on the 'AdFection' spyware campaign
The Electronic Frontier Foundation (EFF) has published its analysis of "AdFection," a malware campaign revealed last week by researchers at Citizen Lab. According to the EFF's account, the campaign used an advertising network to distribute spyware to journalists' devices, infecting them without the target ever needing to click anything.
A zero-click attack built on behavioral advertising
The EFF describes the attack as dangerous and deeply concerning, noting that it is built on the backbone of a technology the organization already opposes: behavioral advertising. The fact that an ad network could be weaponized to deliver spyware silently — with no user interaction required — underscores long-standing criticisms that the behavioral advertising ecosystem creates broad attack surfaces that can be abused against high-risk groups such as journalists.
So far, the campaign has only been described as targeting journalists. However, the EFF cautions that the underlying technique could affect anyone, since ad networks reach devices across the general population.
Mitigation advice for all users
The EFF says there are steps anyone can take to reduce the risk posed by this kind of attack, and it outlines those mitigations in its full write-up. While the feed excerpt does not include the complete list of recommendations, the organization emphasizes that protective measures are worthwhile even for people who do not consider themselves likely targets.
Why it matters
The AdFection case highlights how commercial surveillance infrastructure — in this instance, ad delivery systems — can be repurposed for targeted spyware operations. All details above come from the EFF's published commentary on Citizen Lab's findings.
Source: EFF Updates
