Citizen Lab says governments are abusing online ads to hack people with ‘zero-click’ spyware
Citizen Lab researchers have identified that government-backed spyware makers are using global advertising networks to deliver zero-click malware. The report confirms that malicious ads were used to target devices, including those belonging to media organizations.
Why it matters
This exposes a significant vulnerability in the digital advertising ecosystem that can be exploited for state-sponsored surveillance.
Security researchers at digital rights unit Citizen Lab say government spyware makers are abusing global advertising networks to target and hack devices by serving malicious online adverts.
A new report published Thursday by the University of Toronto lab, which investigates surveillance and digital rights abuses, said an Israeli company called Discover-Tech allows spyware makers to use its advertising platform to target specific people or devices almost anywhere in the world with spyware capable of invisibly stealing their data.
The researchers say Discover-Tech presents itself as a legitimate advertising firm, but instead serves as a “bridge between ad vendors and the mercenary spyware ecosystem.”
Citizen Lab said at least two makers of zero-click spyware, Candiru and Bindecy, used Discover-Tech’s platform to target people. Both of these spyware makers provide surveillance products that can infect devices without the victim having to open a message or click on a link.
Also covering this story
One other newsroom covered this event. We read that version too.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in