An Israeli firm is sending spyware through online ads, researchers say

Security researchers have discovered that an Israeli ad tech firm, Discover-Tech, is facilitating zero-click spyware attacks through online advertisements. The firm allegedly uses a platform called Controlium to target specific individuals, including employees at Al Jazeera, with malware linked to the blacklisted company Candiru.
Why it matters
This represents a dangerous evolution in cyber warfare where standard digital advertising infrastructure is weaponized to bypass user interaction for device infection.
An Israeli ad tech firm worked with spyware companies to infect devices, including at Al Jazeera, by simply showing users an online ad, according to a joint investigation by security researchers at Citizen Lab and Confiant. It’s the first time researchers have found technical evidence of a zero-click attack — a form of hacking that requires no action by users — delivered through targeted advertising, as reported earlier by NBC News.
Also covering this story
3 other newsrooms covered this event. We read each version separately.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in