Researchers have confirmed the first public instance of zero-click mercenary spyware delivered via targeted advertisements. This technique, dubbed AdFection, was recently used to infect Al Jazeera devices with Candiru spyware. The investigation also exposed Discover-Tech, a company that assists mercenary surveillance vendors in tracking and hacking devices globally.