Unverified50% confidenceFactExact time
AdFection's trigger mechanism involves the abuse of browser APIs during the ad rendering process rather than relying on patched CVE vulnerabilities, so the attack surface still exists even if the user's browser is the latest version.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/15/2026
First Seen
Valid until: 1/13/2027
Sources
Related Entities
Related Claims
UnverifiedTraditional zero-click attacks mostly rely on unpatched remote code execution vulnerabilities in the operating system or browser (such as iMessage's FORCEDENTRY), whereas AdFection does not rely on a specific CVE and instead abuses browser API behaviors permitted by the advertising standard itself.77% similarUnverifiedThe emergence of AdFection means that spyware delivery methods are evolving from induced clicks toward imperceptible delivery, traditional security alerts based on user behavior basically become ineffective, and security practitioners need to bring the ad supply chain into their threat models as a key attack surface to proactively monitor.74% similarUnverifiedThese compromised devices were hacked after displaying malicious online ads, with the attack chain hidden in the ad delivery system.69% similarUnverifiedPastejacking是一种视觉欺骗粘贴攻击，恶意网站通过JavaScript监听用户复制操作并替换剪贴板内容为危险指令65% similarUnverifiedThe technique of distributing malware through search advertisements is known in the security field as malvertising.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1036887API
curl https://kongchang.com/api/v1/knowledge/claims/1036887MCP
get_claim(id=1036887)