AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks
Citizen Lab says Candiru used Discover-Tech ads for zero-click spyware, hitting at least 45 Al Jazeera devices.
Citizen Lab reports that Discover-Tech's MyDSP advertising platform was used to profile devices and deliver exploits without a click, and links the operation to Israeli spyware vendor Candiru, later known as Integrity Labs. From March through June 2026, MyDSP bid on 3,770,286,576 impressions and won about 441,954,291, spanning more than 120,000 websites and 70,000 apps. Network logs show at least 45 Al Jazeera devices were targeted in 2024 and 2025 with Candiru spyware delivered through those ads. Google, IAB Europe, Beeswax, Vungle, and Eskimi have since restricted Discover-Tech's access.
82