Skip to content
MONTEGRE
Sign in
BREAKING
/Spanish prosecutors now back probe of Julio Iglesias for alleged sexual assault abroad/West Bank olive farmers face deadly harvest amid settler violence/Meta updates commercial terms to allow news content scraping for AI training/France braces for nationwide cost-of-living protests as Macron urges calm/Putin Says Russian Forces Captured Dobropolye in Donetsk/Albania Student Protests Turn Violent in Tirana/Spanish prosecutors now back probe of Julio Iglesias for alleged sexual assault abroad/West Bank olive farmers face deadly harvest amid settler violence/Meta updates commercial terms to allow news content scraping for AI training/France braces for nationwide cost-of-living protests as Macron urges calm/Putin Says Russian Forces Captured Dobropolye in Donetsk/Albania Student Protests Turn Violent in Tirana

Israeli ad firm linked to spyware delivery via online ads

Researchers say Discover-Tech used ad networks to track users and deploy Candiru spyware on Al Jazeera devices.

Sources: Netzpolitik, Cyprus Mail, Formiche, Go4IT4 sources ↓|· 1 min read
Israeli ad firm linked to spyware delivery via online ads
Photo: Netzpolitik

KEY POINTS

  • Israeli firm Discover-Tech used online ad infrastructure to distribute Candiru spyware
  • At least 45 Al Jazeera devices infected in first documented 'AdFection' zero-click attacks
  • Discover-Tech reached 120,000+ websites and 75,000 apps via partnerships with Google, Comcast, Yandex
  • Company held certified partner status with Google until recently
  • Researchers warn online advertising ecosystem poses systemic security threat

Researchers from Citizen Lab and Confiant say Israeli ad-tech company Discover-Tech operated a vast network reaching over 120,000 websites and 75,000 apps. The firm allegedly served malicious ads that could identify, track, and extract phone numbers from visitors without any clicks.

Some advertisements delivered Candiru spyware, a surveillance tool blacklisted by the U.S. government, onto target devices. At least 45 devices belonging to Qatar-based broadcaster Al Jazeera were infected in what researchers call the first documented case of "AdFection" attacks.

“The way online advertising works today is a systemic security threat.”

— Wolfie Christl, Citizen Lab researcher

Discover-Tech held certified partner status with Google and participated in ad auctions on platforms run by Comcast and Yandex. The company, founded in 2020, did not respond to requests for comment from multiple outlets.

Citizen Lab researcher Wolfie Christl described the current online advertising model as a systemic security threat affecting states, businesses, and civil society alike. Confiant estimated Discover-Tech served at least 10 million ads daily worldwide.

READ THE FULL STORYat Netzpolitik

4 more sources below

TOPICS

#Cybersecurity#Espionage#Technology#Artificial Intelligence

COMMENTS (0)

0/2000

No comments yet. Be the first.

RELATED STORIES

Technology3 sources

Meta updates commercial terms to allow news content scraping for AI training

Meta's new commercial terms, effective October 30, permit automated collection of content from business pages to train its products.

Economy4 sources

IMF Urges US, China Policy Shifts to Cut Global Debt Risks

Kristalina Georgieva says growth alone cannot fix US debt; calls for fiscal tightening and Chinese rebalancing toward domestic consumption.

Agenda5 sources

Eight-province illegal betting ring seized 1.2 billion liras in Turkey

Police in eight provinces detained 21 suspects and seized 12 vehicles and 8 properties in an illegal betting and money-laundering operation.

This page was compiled with AI assistance from the outlets named above and passed an automated language check before publication. Montegre has no reporters of its own; the byline names the outlets the story was compiled from. Method and editorial standards