Citizen Lab, a cybersecurity research institution based at the University of Toronto in Canada, has recently unveiled that a novel form of attack, leveraging the online advertising delivery system, has been employed for espionage purposes. Attackers are capable of pinpointing targets and deploying spyware on their devices through online advertisements, without the need for victims to click on any links. Researchers have dubbed this technique 'AdFection' and emphasized that this marks the first instance where publicly accessible technical evidence substantiates that 'zero-click' commercial spyware attacks can be executed via online advertising systems. The investigation disclosed that this technique was utilized in a cyber infiltration operation aimed at Al Jazeera in Qatar, with at least 45 devices falling victim to the attack between 2024 and 2025. Attackers took advantage of the advertising platform Controlium, operated by Discover-Tech company, to gather device information through real-time bidding systems and dispatch malicious code to the targeted devices, initiating attacks automatically without requiring user interaction. This advertising platform has been present on approximately 200,000 websites and mobile apps worldwide, with millions of devices being directed to establish connections with related servers. Following the revelation of the incident, advertising platforms like Google have terminated their partnerships with Discover-Tech.