多伦多大学公民实验室本周四公布的研究报告揭示了一种新型攻击方式：雇佣黑客在定向广告中嵌入零点击漏洞，使用户仅需加载网站或打开应用便可在其设备上被秘密安装复杂恶意软件1。这是首次确认此类通过定向广告传播的雇佣间谍软件攻击1。该活动被代号为「AdFection」1。
研究人员已确认在2024年至2025年期间，这一攻击活动对国际媒体机构半岛电视台造成了严重威胁，感染了其45台设备1。受影响的设备涵盖iOS和Android两大操作系统平台1。由于攻击不需要任何用户交互即可执行，其隐蔽性极强1。公民实验室警告指出，"新闻机构可能正在被该威胁积极针对"1。
Researchers at the Citizen Lab at the University of Toronto released a report this week documenting a novel attack method in which hired hackers embedded zero-click exploits within targeted advertisements to silently install sophisticated spyware on user devices without any interaction required 1. The campaign, dubbed "AdFection," represents the first confirmed instance of zero-click mercenary spyware being distributed through ad networks and has affected both iOS and Android platforms 1.
The investigation identified 45 infected devices belonging to Al Jazeera, an international media organization, during the period from 2024 to 2025 1. According to the Citizen Lab's findings, the attack's invisible nature and lack of user involvement make it particularly dangerous 1. Researchers warned that "news organizations may be actively targeted by this threat," signaling potential risks to media institutions globally 1.
评论
还没有评论，欢迎留下第一条。