Internet Ads Are Now Hacking Your Computer...

Summary

The video examines “adfection,” a reported zero-click spyware campaign in which malicious code is delivered through online advertising. A person may be infected simply by loading a webpage that displays an ad; clicking or even noticing the ad may not be necessary.

How the alleged attack works

The investigation describes a chain involving ad-tech company Discover Tech and a platform whose name is unclear in the auto-generated subtitles (“Conti…”). Through real-time bidding (RTB), advertisers compete to place ads as a webpage loads. The report alleges that targeting data and ad impressions were used to identify particular devices or users and route them to malicious infrastructure. The process could reportedly progress from an ad loading to spyware establishing a command-and-control connection within minutes.

RTB systems exchange information about users and devices to target ads. The video explains that this infrastructure could also allow attackers to reach people across multiple websites, rather than compromising a single site.

Alleged involvement and reported scale

The host connects the campaign to Candiru, an Israeli spyware vendor reportedly selling tools to government clients, and to Discover Tech, which allegedly distributed malicious ads through advertising networks. These claims are presented as researchers’ findings and allegations, not as independently proven claims in the video.

Researchers reportedly analyzed billions of ad-bidding records and identified activity across 228 countries. The host highlights Palestine as a particularly targeted location and describes campaigns in various countries, including ads reaching government and intergovernmental networks. According to the video, Google removed Discover Tech from its ad platforms after the findings emerged.

Potential impact and detection

The spyware is described as capable of exploiting vulnerabilities, gaining elevated privileges, and stealing information or enabling surveillance. Keeping operating systems and browsers updated can reduce risk, but may not prevent attacks that exploit vulnerabilities that have not yet been detected or patched.

The video says researchers shared malware hashes that were checked with VirusTotal, where 51 of 71 antivirus engines reportedly identified malware. The host notes that detection results can vary, while arguing that this number of detections supports the researchers’ conclusion.

Advice offered

The host recommends keeping systems and browsers updated and using ad blocking, including browser-based tools and network-wide options such as Brave’s Shields and Pi-hole. He describes ad blocking as an important protection while acknowledging that it can interfere with some site features.

The video does not provide a step-by-step malware-handling tutorial and warns against downloading or experimenting with malware unless you know how to handle it safely.

Reviews, guides, or tutorials

• No product review or hands-on malware-removal guide is provided.
• The video offers general security recommendations: keep software updated and block ads where possible.
• It cautions against downloading or experimenting with malware without the knowledge to handle it safely.

Main speaker and sources

• Main speaker: Mutahar, from SomeOrdinaryGamers.
• Sources and organizations discussed: University of Toronto’s Citizen Lab, Confiant, Discover Tech, Candiru, VirusTotal, and VX Underground.
• The host also references Amazon’s explanation of real-time bidding and prior reporting by Gamers Nexus about LG ad tracking.