Zero Breach

Local, dependency-free Python scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. Reads browser history, cookie hosts and caches, hashes candidate files against known samples, and inspects Windows COM registrations, the DNS cache and hosts file, then grades findings by evidence strength. Needs no admin rights, makes no network requests, defangs domains/IPs in output and can export indicators as STIX 2.1, MISP and blocklist formats.