Citizen Lab has documented the first confirmed case of zero-click mercenary spyware delivery via targeted online ads, termed "AdFection." This technique allows for automatic, precise hacking without user interaction. Researchers believe dozens of devices at Al Jazeera were compromised by spyware from an agency called Discover-Tech. Discover-Tech uses a platform called Controlium to profile and deanonymize internet users for covert hacking. The spyware infects devices silently and quickly, requiring no user clicks or engagement. The online advertising ecosystem is being weaponized to profile millions and silently infect targets with this spyware. Controlium harvests user identity and IP addresses through seemingly harmless ads. If a user is targeted, malicious spyware code is sent to their device. Discover-Tech has served ads to millions worldwide since 2024, with targeting allegedly occurring in several countries. These findings highlight how opaque online advertising can be used for surveillance.