⬢github Python · 890 ★ +335 since we first saw it · pushed 8 d ago · Apache-2.0
interplains/zero-breach
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
Zero Breach is a local, read-only Python scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign documented by The Citizen Lab. It inspects browser history, cookies, caches, file hashes, auto-start entries, and DNS records for published indicators of compromise, grades the strength of each match, and clearly reports what it could not check — without any network access, admin rights, or dependencies.
Why now: It gained attention on GitHub's trending list alongside the October 2026 Citizen Lab disclosure of Discover-Tech's Controlium platform delivering Candiru spyware via real-time ad bidding, and a recent v0.1.8 release fixed version reporting and hardened network-path handling.
Who it is for: Security responders, journalists, activists, and technically capable individuals who want to check their own devices for traces of this spyware campaign without shipping data anywhere.
candirudigital-securityforensicsincident-responseiocmispspywarestixthreat-intelligence
Stars over our 157 snapshots: 555 to 890, since 1 d ago.
Where people talked about it
- ⬢github new repos, most starred 14 min ago
- ⬢github new repos, most starred 1 d ago
API: https://socialmediatrends-api.osmike.com/v1/repos/interplains/zero-breach