Zero-click spyware infecting devices through online ads, researchers say
Citizen Lab says Candiru used Discover-Tech ads to zero-click infect Al Jazeera journalists and reach sensitive government networks.
Citizen Lab and Confiant say Israeli ad firm Discover-Tech used its Controlium platform to deliver zero-click spyware through online ads. The ads infected devices of at least 45 Al Jazeera journalists and were rendered on sensitive networks including NATO, the U.S. Department of Defense, Estonia’s RIA, the IAEA, and the ICC. Candiru allegedly hired Discover-Tech; the ads sent millions of devices to Candiru servers and the spyware can record calls, enable microphones, and steal messages. Researchers reviewed four billion placement records, and Google and other platforms have since blocked Discover-Tech.
78