Integrity Partners (Organization): news timeline & CVEs

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

Citizen Lab says Candiru spyware hit at least 45 Al Jazeera devices via zero-click ads.

The Citizen Lab reported that Israeli spyware maker Candiru infected Al Jazeera devices through online ads that ran without a click. Discover-Tech ads sent advertising IDs and IP addresses to a server that returned browser or app exploit code only for chosen targets. At least 45 devices were targeted in 2024 and 2025, and a recovered Windows sample matched Candiru tooling analyzed in 2021. Google, IAB Europe, and other ad platforms later removed or blocked Discover-Tech.

The Hacker Newsupdated Oct 16, 17:20 UTC · 11h agofirst Oct 15, 16:01 UTC · 1d agoMalware in the wild 12 sources2· 1 read

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads

Citizen Lab says Candiru spyware infected Al Jazeera phones through zero-click ads placed by Discover-Tech.

Citizen Lab reported that zero-click “AdFection” attacks infected devices through online ads, including 45 Al Jazeera phones targeted in 2024 and 2025. Israeli firm Discover-Tech’s Controlium platform allegedly sent devices to infrastructure tied to Candiru spyware, sometimes without a visible ad. Researchers estimate millions of devices were directed toward those servers, with linked ads shown in more than 70,000 apps and 120,000 websites. Google, IAB Europe, and Beeswax subsequently blocked or suspended Discover-Tech.

WIRED · Securityupdated Oct 16, 17:20 UTC · 11h agofirst Oct 15, 10:00 UTC · 1d agoMalware in the wild 12 sources2· 1 read

Integrity Partners

Timeline2 articles

Appears with

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads