How to stop zero-click AdFection spyware - Turning off Javascript in Chrome

The first public technical confirmation of a zero-click mercenary spyware attack delivered via targeted advertising, which we call AdFection is out. 


The operations of the cyber-attack company Candiru have been sold to the investment fund American investment fund Integrity Partners for up to $30 million. According to an agreement signed several months ago, the fund purchased Candiru’s assets and transferred them—along with all of the company's employees—to a new entity that is not subject to U.S. government sanctions.

Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen Lab

Here's how to stop the spread

To disable JavaScript for all websites in Google Chrome, follow these steps:

1. Open Chrome.

2. Copy and paste this address into the address bar:
   
   chrome://settings/content/javascript

3. Press Enter.

4. Select Don't allow sites to use JavaScript or switch the JavaScript permission toggle off, depending on your Chrome version.
   
   

   
   
   

5. Close Settings and reload any open websites by pressing Ctrl + R.

To verify: Return to chrome://settings/content/javascript and confirm that JavaScript is blocked by default.

Note: This setting applies to all websites unless you add individual site exceptions. Some websites, including banking sites, login pages, and CAPTCHA systems, may not function properly.

6. To re-enable JavaScript per site, click <x> to add site to allow JavaScript (whitelist).