Source: WIRED
Mercenary spyware operators have weaponized programmatic ad networks—the infrastructure powering most mobile advertising—to silently infect phones without user interaction. Ad exchanges are now active infection vectors for tools like Pegasus. Billions of devices using standard browsers are vulnerable during routine internet use. Fixing this requires coordination between ad platforms, device makers, and telcos, but none have strong incentives to prioritize it: spyware buyers (governments, private investigators) represent better economics than ad fraud prevention.