Kaspersky Flags Digital Advertising As An Emerging Cyber Threat

Kaspersky has warned that the same advertising technologies used to deliver personalised online ads are increasingly being exploited by cybercriminals and advanced persistent threat (APT) groups to identify and target victims, expanding the cyberattack surface beyond traditional phishing campaigns and malicious downloads.

The warning was issued during the company’s annual Cyber Security Weekend for the Middle East, Türkiye and Africa (META) region, where researchers highlighted how the digital advertising ecosystem has evolved into a potential intelligence-gathering tool for sophisticated attackers.

Digital advertising has become a cornerstone of the modern internet, processing billions of advertising requests every day to match users with content based on their interests, browsing habits, device information and approximate location. While this infrastructure enables businesses to deliver more relevant advertising, it also depends on the continuous collection and sharing of user data across multiple intermediaries.

According to Kaspersky, that same ecosystem is now being leveraged by threat actors to build detailed profiles of potential targets. By abusing advertising platforms, real-time bidding (RTB) systems and data broker networks, attackers can identify specific individuals, monitor their movements and, in some cases, deploy highly targeted spyware that requires no user interaction beyond opening a legitimate application displaying advertisements.

The findings underscore a growing shift in cyberattacks, where attackers increasingly rely on publicly available commercial data and legitimate digital infrastructure rather than traditional malware delivery techniques. As organisations continue investing in personalised digital experiences, security experts argue that advertising technology is becoming another area that requires closer scrutiny from cybersecurity teams.

The research also highlights that the risks extend beyond privacy concerns commonly associated with online advertising. Certain forms of adware can serve as an entry point for more serious cyber threats.

One example cited by Kaspersky is Adware.Script.Redirect, a variant capable of redirecting users to malicious websites that distribute malware. In Kenya, the company says it blocked more than 320,000 attempts to redirect users to malicious content during the first half of 2026, illustrating the scale at which advertising-related threats are occurring.

“The advertising ecosystem was built to deliver the right message to the right person at the right time. Unfortunately, those same capabilities can be abused by sophisticated threat actors,” said Maher Yamout, Lead Security Researcher at the Global Research and Analysis team at Kaspersky.

“What was originally designed for commercial targeting can be transformed into intelligence gathering, allowing attackers to identify high-value individuals, understand their behaviour and deliver exploits through trusted applications and websites. As advertising platforms become more precise, organisations must recognise that the attack surface extends well beyond traditional phishing emails and malicious downloads.”

The warning comes as organisations across Africa accelerate digital transformation initiatives and increasingly depend on mobile applications, online advertising and data-driven customer engagement. While these technologies improve marketing efficiency, they also expand the amount of personal and behavioural data circulating across advertising networks, creating new opportunities for attackers seeking high-value targets.

Security researchers have increasingly observed threat actors blending legitimate digital services with malicious operations, making attacks harder to detect. Rather than compromising systems directly, attackers can first use commercially available advertising data to understand a target’s interests, locations, devices and online behaviour before launching more precise attacks.

This evolution reflects a broader trend in cybersecurity, where intelligence gathering has become as important as exploitation. The more accurately attackers can profile potential victims, the greater the likelihood that subsequent attacks will succeed.

To reduce exposure, Kaspersky recommends that consumers keep their devices and applications updated and use trusted cybersecurity solutions capable of detecting malicious activity. For enterprises, the company advises adopting a layered security strategy that includes Endpoint Detection and Response (EDR), anti-targeted attack platforms, threat intelligence capabilities, regular reviews of application permissions and the use of ad blockers on corporate devices to reduce exposure to advertising infrastructure.

As digital advertising continues to evolve, security experts say organisations will need to consider ad-tech not only as a marketing tool but also as part of their broader cybersecurity risk landscape. The growing convergence between advertising infrastructure and cyber threats highlights how technologies designed to improve user experiences can also become attractive tools for sophisticated attackers seeking to identify, monitor and compromise carefully selected targets.