Senators cite ad-delivered spyware; ad groups defend vetting
Original title: Senators say targeted ads are a security risk. Ad groups say the critics are off base.
Citizen Lab's AdFection report says Discover-Tech ads carried zero-click mercenary spyware, including impressions on government networks.
Sens. Ron Wyden and Cory Booker said a Citizen Lab and Confiant report on AdFection shows targeted ads can deliver zero-click mercenary spyware. The report links Discover-Tech ads to the spyware firm Candiru and says those ads reached government networks. Google and IAB Europe defend their vetting; Google says it banned Discover-Tech during the joint investigation, and Beeswax, Vungle and Eskimi also cut access.
Unconfirmed: The article does not state how many government devices were infected, only that Discover-Tech ads got impressions on government networks.
- Wyden urges agencies to disable ads on government browsers and turn off mobile ad IDs.
- Discover-Tech had appeared on Google and IAB Europe certified or approved vendor lists.
- Citizen Lab also urges scrutiny and sanctions related to Candiru and enabling firms.
- Microsoft, owner of the ad system Xandr, did not respond to CyberScoop, the article says.
Impact: Zero-click mercenary spyware delivered through targeted ads
- 1.Disable targeted ads and mobile ad IDs on government browsers, as Wyden urges.
- 2.Vet, audit and remove ad partners linked to spyware delivery.
From the original article
5 min read at cyberscoop.com
Citizen Lab’s AdFection findings have senators pushing for industry improvements, while IAB Europe and Google defend their vetting practices. The post Senators say targeted ads are a security risk. Ad groups say the critics are off base.
By Tim Starks · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.