Skip to content
NewA calmer, faster ZeroHour
StoryMalwarehigh

Citizen Lab links Discover-Tech ads to Candiru infections

2 sources · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Citizen Lab says Discover-Tech ads helped Candiru infect devices without clicks; senators and ad platforms have since responded.

University of Toronto's Citizen Lab says Israeli ad-tech firm Discover-Tech used a method it calls AdFection to help spyware vendor Candiru infect devices without a victim click. Dark Reading reports at least 45 Al-Jazeera personnel devices were infected by abusing real-time ad auctions that can expose IP addresses, mobile advertising IDs, and cookies. CyberScoop, citing a Citizen Lab and Confiant report, says those ads also reached government networks. Google says it banned Discover-Tech during the joint investigation; Beeswax, Vungle, and Eskimi also cut access, while Sens. Ron Wyden and Cory Booker called targeted ads a security risk. Candiru, which now calls itself Integrity Labs, was previously placed on the US Commerce Department Entity List.

Key facts
  • Citizen Lab says at least 45 Al-Jazeera devices were infected without a click.
  • Ad auctions can expose IP addresses, mobile advertising IDs, and cookies.
  • Candiru now calls itself Integrity Labs and was on the Entity List.
  • Google says it banned Discover-Tech during the joint investigation.
  • Beeswax, Vungle, and Eskimi also cut Discover-Tech access.
  • Wyden urges agencies to disable government-browser ads and mobile ad IDs.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • Dark ReadingNames the 45 Al-Jazeera infections, auction identifiers, and Integrity Labs.
  • CyberScoopAdds Confiant, government networks, platform bans, and senators' response.
Vendors
Discover-TechGoogleMicrosoft
Products
Xandr
Threat actors
Candiru
Victims
Al-Jazeera
Organizations
Citizen LabUniversity of TorontoUS Department of CommerceIntegrity LabsConfiantIAB EuropeDiscover-TechBeeswaxVungleEskimi
Countries
IsraelUnited States

Coverage

oldest first · one row per article · UTC
  1. · 6d ago Dark ReadingFirst report

    Citizen Lab says AdFection used ads to deliver Candiru spyware

    Discover-Tech allegedly helped infect at least 45 Al-Jazeera devices without a victim click.

  2. · 2d ago CyberScoop

    Senators cite ad-delivered spyware; ad groups defend vetting

    Citizen Lab's AdFection report says Discover-Tech ads carried zero-click mercenary spyware, including impressions on government networks.