Researchers say a spyware delivery network used online ads to silently infect devices, including those of at least 45 Al Jazeera journalists, and to reach sensitive government and international-organization networks. Citizen Lab and Confiant linked Israel-based Discover-Tech and its Controlium ad platform to Candiru, saying malicious JavaScript in ads could fingerprint, deanonymize, track, and automatically infect Android and iPhone devices when an ad was rendered, with ad placements seen across nearly 200,000 websites and apps and on networks tied to NATO, the U.S. Department of Defense, Estonia’s RIA, the IAEA, and the ICC.
Why it matters: This shows that ordinary online advertising infrastructure can be turned into a zero-click spyware channel against journalists, dissidents, and officials, broadening the risk far beyond traditional phishing. Media organizations, governments, and ad-tech platforms should urgently review exposure, hunt for ad-driven compromises, and reassess which advertising code is allowed on sensitive networks and devices.
Ionut Arghire
2026.10.17
98% relevant
This is a direct follow-up on the same Discover-Tech/Candiru ad-tech spyware operation, adding that at least 45 Al Jazeera devices were targeted between 2024 and 2025, that a Discover-Tech server exposed four billion ad bid records, and that Google, IAB Europe, Beeswax, and Eskimi removed or blocked the company from ad systems in early October.
Bill Toulas
2026.10.16
98% relevant
This is the same underlying event: Citizen Lab’s disclosure that Discover-Tech ad placements were used to deliver Candiru spyware in zero-click attacks. The article adds detail on Al Jazeera as a confirmed target, the 'AdFection' delivery chain via mainstream ad networks, evidence recovered from a compromised Windows device, and the scale of ad bidding and placements tied to the operation.
2026.10.15
100% relevant
This article appears to be the first item here establishing the specific Discover-Tech and Candiru ad-delivered zero-click spyware campaign as a tracked event.
← Back to all stories