Citizen Lab says the AdFection campaign used targeted ads to infect iOS and Android devices without user interaction, likely the first confirmed delivery of mercenary spyware by this method. It verified infections on 45 Al Jazeera devices in 2024 and 2025.