Tech · October 15, 2026
Israeli ad company helped a spyware firm target Al Jazeera through online ads, researchers say
Security researchers from Citizen Lab and Confiant have uncovered evidence that an Israeli advertising firm, Discover-Tech, facilitated 'zero-click' spyware attacks through online advertisements. This technique, dubbed 'AdFection' by researchers, reportedly allowed spyware developers like Candiru to profile and infect devices—including at least 45 belonging to the news outlet Al Jazeera—without requiring the victims to click any links. Following the report, major industry players including Google and Comcast-owned Beeswax removed Discover-Tech from their platforms, while IAB Europe suspended the firm. The findings highlight a significant escalation in 'malvertising,' where the automated real-time bidding infrastructure of the web is weaponized for targeted government-backed surveillance.
Read the original coverage
- NBC NewsMainstream
Israeli ad company helped a spyware firm target Al Jazeera through online ads, researchers say
Read at NBC News ↗ - The VergeTrade
An Israeli firm is sending spyware through online ads, researchers say
Read at The Verge ↗ - TechCrunchTrade
Citizen Lab says governments are abusing online ads to hack people with 'zero-click' spyware | TechCrunch
Read at TechCrunch ↗ - WiredTrade
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Read at Wired ↗ - The GuardianMainstream
Online ads weaponised to deliver ‘zero-click’ spyware, researchers say
Read at The Guardian ↗
Reported by multiple outlets
- Researchers from Citizen Lab and Confiant identified Discover-Tech as the ad firm facilitating the attacks.
- The attacks used 'zero-click' technology, meaning spyware was installed without user interaction.
- At least 45 devices at Al Jazeera were targeted or compromised in 2024 and 2025.
- Discover-Tech's platform is called 'Controlium.'
- The spyware firm Candiru, which is blacklisted by the U.S. government, was linked to the attacks.
- Google, Beeswax, and IAB Europe have taken restrictive actions against Discover-Tech following the investigation.
Reported by only some outlets
- TechCrunch reported that researchers found billions of ad bidding records exposed on Discover-Tech’s website.
- The Guardian and Wired noted that Discover-Tech ads were seen on networks belonging to NATO, the UN, the ICC, and the IAEA.
- TechCrunch identified Bindecy as a second spyware maker that utilized Discover-Tech’s platform.
- Wired noted that Al Jazeera participated in the investigation by sharing device logs.
- The Guardian mentions that Discover-Tech ads were served to users in Yemen, Brazil, Mexico, and Czechia.
Industry-friendly coverage frames it as…
Industry-focused coverage emphasizes the immediate response by major tech firms like Google and Beeswax to purge the bad actor from the ecosystem, framing it as a successful, if belated, self-policing action.
Skeptical / consumer coverage frames it as…
Skeptical framing highlights the inherent, systemic dangers of the opaque real-time bidding (RTB) advertising model, suggesting that the industry's lack of regulation and oversight makes such surveillance inevitable.
Numbers that differ
- Number of targeted devices at Al Jazeera: All sources report 'at least 45' or 'dozens.'
CadNews does not determine absolute truth or endorse political viewpoints. It compares publicly available reporting, identifies shared facts, highlights framing differences, and flags uncertainty.