International
The Morning Dev

Only the news worth knowing

‹
 
D7/100

Malware · high

Spyware attacks trend toward hitting just about anyone

Tier D · Background noise – Good to know

Who’s exposed: Ordinary people visiting ad-supported websites

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

Exploited in the wild · Remote, no login · Full takeover

The Brief

  • Spyware attacks are increasingly hitting everyday people rather than traditionally high-value targets, according to a new report by iVerify.
  • Cybercriminals are infecting devices with spyware on a large scale.
  • The AdFection spyware attacks could infect anyone who visits a website that carries advertising.

Why it matters

Developers cannot assume that only high-profile users are at risk, so spyware exposure should be treated as a broad threat to the users of the software and websites they build.

The checklist behind the tier

Checklist · 3 of 10 yes
NoHits tech teamsJudgment: Targets are everyday citizens' personal devices, not systems developers, ops or IT teams run.
NoCore infrastructureJudgment: No core infrastructure software is named; the incident concerns spyware infecting consumers.
NoPopular toolJudgment: No widely used framework, tool, platform, OS or package is named as the flawed or compromised product.
YesExploited in the wildCyberScoop: mounting evidence of spyware attacks; AdFection attacks infected visitors to ad-carrying sites.
NoPublic exploitNeither source says exploit code or a proof-of-concept is published.
YesRemote, no loginCyberScoop: AdFection could infect anyone visiting a website that had advertising on it, with no credentials described.
YesFull takeoverThe Record: cybercriminals are infecting devices on a large scale with spyware, implying code execution on victim devices.
NoSecrets exposedNeither source states that credentials, data or other secrets were stolen or exposed.
NoSupply chainNeither source says a legitimate project, update, build pipeline or package was compromised.
NoNo fix yetNeither source mentions whether a patch or fix is available.

Timeline

  1. iVerify report on spyware attacks increasingly hitting everyday people published

  2. CyberScoop

    Spyware attacks trend toward hitting just about anyone

  3. The Record from Recorded Future News

    Cybercriminals are increasingly infecting regular people with spyware

Full coverage · 2 sources

First seen · 2 sources · Full story page · How tiers are decided