[CLSTR]
< Back to all clusters
[TECHNOLOGY] · Israel, Canada, United States · 63 sources

started · updated

Part of situation: Discover-Tech digital advertising spyware exploitation (2 clusters)

Discover-Tech used digital ads to facilitate zero-click spyware attacks

AdFection zero-click spyware digital advertising surveillance mercenary spyware cybersecurity threat

Researchers from Citizen Lab and Confiant have uncovered a sophisticated cyber-espionage technique dubbed ‘AdFection.’ This method utilizes the global digital advertising ecosystem to deliver mercenary spyware to targeted devices via ‘zero-click’ attacks, meaning no user interaction, such as clicking a link, is required for infection.

An investigation revealed that the Israeli firm Discover-Tech acted as an intermediary, using its advertising platform, Controlium, to facilitate access for spyware developers like Candiru (now operating as Integrity Labs). By purchasing malicious ads through major networks including Google, Yandex, and Microsoft, the attackers could identify and compromise specific devices.

At least 45 devices belonging to Al Jazeera journalists were confirmed to be targeted between 2024 and 2025. The investigation also found that Discover-Tech’s ads appeared on nearly 200,000 websites and applications, potentially exposing networks associated with NATO, the United Nations, the European Commission, and various government agencies across multiple countries.

Entities

Al Jazeera · Candiru · Citizen Lab · Confiant · Discover-Tech · Google · Integrity Labs · Mossad

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

تقارير: «ديسكفر تك» الإسرائيلية استخدمت الإعلانات الرقمية للتجسس [www.akhbrna.ae]
How Israeli firm’s ‘zero-click’ malware attack poses global security risk - Bahamas Spectator – Bahamas & Caribbean News, Travel & Business [bahamasspectator.com]
Τεράστια επιχείρηση κατασκοπείας μέσω διαδικτυακών διαφημίσεων από ισραηλινή εταιρεία [dete.gr]
Πώς λειτουργούσε το ισραηλινό λογισμικό κατασκοπείας: Εκατομμύρια συσκευές εκτέθηκαν [www.e-radio.gr]
Spyware mediante publicidad digital infectó dispositivos sin clics [elespecialitodigital.com]
Israeli Companies Used Malware Ads To Spy On Al Jazeera Journalists, Report Says [forbesliberia.com]
How Israeli firm’s ‘zero-click’ malware attack poses global security risk - Haiti Gazette – Daily Haiti News [haitigazette.com]
Waspada AdFection, Teknologi Cuak Ala Israel yang Targetkan Jurnalis hingga Pejabat [jawapos.com]
AdFection: Spyware durch Werbung ohne Klick [www.mimikama.org]
Redes del gobierno uruguayo quedaron expuestas a plataforma publicitaria de agencia israelí acusada de espionaje [semanariolaprensa.com]
How Israeli firm’s ‘zero-click’ malware attack poses global security risk - St. Vincent Tribune – Daily St Vincent And The Grenadines News [stvincenttribune.com]
Israeli ad-tech firm helped spy on Al Jazeera devices - Antigua Tribune – Daily Antigua & Caribbean News, Global Headlines & Insights [antiguatribune.com]
Candiru Spyware Hit Al Jazeera Via Zero-click Online Ads [bitnewsbot.com]
Targeted ads delivered 0-click exploits to install mercenary malware [cybernoz.com]
Stačí len obyčajné prezeranie webu! Nový vírus dokáže infikovať zariadenie bez toho, aby používateľ klikol na odkaz [gamesite.zoznam.sk]
Spyware Zero-Clic Via Publicités Ciblées [innovations.fr]
Почна кошмарот - шпионски софтвер заразува уреди преку реклами без ниеден клик [racin.mk]
كيف تحولت الإعلانات على الهواتف إلى أداة تجسس إسرائيلية؟ [www.alhayatp.net]
Israeli ad-tech firm helped spy on Al Jazeera devices | Barbados Gazette – Barbados & Caribbean News [barbadosgazette.com]
Online ads infected targets with Candiru spyware in zero-click attacks [cyberinsider.com]
How Israeli firm’s ‘zero-click’ malware attack poses global security risk - Dominican Republic Post – Caribbean News, Business, Travel & Culture [dominicanrepublicpost.com]
Pozor na levné smartphony. V jejich systému se ukrývá vir, kterého se nelze zbavit [www.fonetech.cz]
Una investigación descubre anuncios capaces de instalar spyware sin que el usuario haga clic [www.geeknetic.es]
Israeli Firm Used Online Ads to Run Vast Spy Operation [israelpalestinenews.org]
Citizen Lab expone AdFection, el spyware zero-click que se sirve por publicidad dirigida [www.moncloa.com]
Un simple aperçu publicitaire peut-il contaminer votre smartphone sans même cliquer [www.netcost-security.fr]
Usan publicidad digital para espiar periodistas de Al Jazeera [oncenoticias.digital]
Espionnage israélien : Discover-Tech au cœur d'un scandale diplomatique [www.politiquematin.fr]
Israeli Firm Faces Google Ban After Planting Zero-Click Spyware on Al Jazeera Devices [www.sofx.com]
Campanha instala app em roteadores e revende banda alheia [www.spacemoney.com.br]
Israeli company accused of spying on millions through online ads [thecurrent.pk]
Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen Lab [citizenlab.ca]
Ισραηλινή εταιρεία χρησιμοποιούσε διαδικτυακές διαφημίσεις για να εκτελέσει μια τεράστια επιχείρηση κατασκοπείας [athina984.gr]
Citizen Lab belegt Spyware per Werbeanzeige, ohne Klick [www.blogspan.net]
Candiru lidera maior espionagem digital via anúncios online [cafetorah.com]
Comment une attaque « sans clic » liée à une entreprise israélienne pose un risque pour la sécurité mondiale [defimedia.info]
Israeli firm used online ads to run vast spy operation, researchers say | International [www.devdiscourse.com]
Kabus senaryosu gerçek oldu: İsrail, reklamlar üzerinden telefonlara sızıyor [www.donanimhaber.com]
Spyware über Werbung: Was AdFection bedeutet und wie du deine Geräte schützt [www.drohnen.de]
Espionnage publicitaire : comment l’affaire Discover-Tech ébranle l’ad-tech [www.economiematin.fr]
Descubren un malware que te infecta con solo ver un anuncio [hipertextual.com]
İsrailli şirket internet reklamlarıyla casus yazılım yerleştirdi [www.karar.com]
Онлајн рекламите се користат за тајно инсталирање шпионски софтвер без клик од корисниците [meta.mk]
Online ads infected Al Jazeera devices with zero-click spyware, report says [www.news9live.com]
Πώς λειτουργούσε το ισραηλινό λογισμικό κατασκοπείας που μόλυνε εκατομμύρια συσκευές χωρίς κανένα κλικ [www.newsbeast.gr]
Perusahaan IT Israel Terbukti Dalangi Serangan Spyware yang Menargetkan Para Jurnalis Al Jazeera - Republika Online [news.republika.co.id]
تحقيقات أمنية تكشف تجسس شركة إسرائيلية على مئات الملايين من الأشخاص [sana.sy]
Pas besoin de cliquer ? Comment des publicités web ordinaires ont secrètement installé des logiciels espions sans clic sur des appareils | Toute l’actualité en France et dans le Monde - upday News [www.upday.com]
Researchers Uncover Zero-Click Spyware Delivered Through Digital Ads [www.visiontimes.com]
Dünyayı sarsan İsrail casusluk skandalı: Tıklamadan tüm verileri çaldılar [www.yenicaggazetesi.com]
Ισραηλινή εταιρεία χρησιμοποιούσε διαδικτυακές διαφημίσεις για κατασκοπεία [www.zougla.gr]
Reklamy ako nástroj špionáže: ohrozené sú aj vládne siete - Kyberbezpecnosť - Defencenews [www.defencenews.sk]
شركة إسرائيلية تخترق الأجهزة عبر الإعلانات. . دون حاجة إلى نقر [www.alaraby.co.uk]
Israeli Spyware Firm Turned Everyday Ads Into Hacking Tools [freerepublic.com]
No-click spyware enabler 'served ads on Australian media networks' [mumbrella.com.au]
Handys lassen sich ohne Klick per Werbeanzeige hacken [netzpolitik.org]
Israeli ad firm helped spyware target Al Jazeera journalists [www.newarab.com]
Empresa israelita terá usado anúncios online para instalar spyware sem cliques [sapo.pt]
Zero-click spyware infecting devices through online ads, researchers say [therecord.media]
Spyware vendors found a way to make targeted ads even worse [www.theregister.com]
Online reklamlarla telefonlara sızdı | Ortadoğu Haberleri [www.yenisafak.com]
ネット広告を表示するだけでスパイウェアに感染するゼロクリック攻撃「AdFection」が確認される、イスラエルの広告企業が仕掛けていた攻撃の手口とは？ [gigazine.net]
Israeli firm’s digital ads enabling installation of ‘zero-click’ spyware, researchers say [www.theguardian.com]