policy

Israeli Ad Firm's Software Linked to Zero-Click Spyware Attacks

Summarized from Business | The Guardian

Researchers say Discover-Tech's ad platform enabled covert device hacks, including targeting Al Jazeera journalists in Qatar.

Israeli Ad Firm's Software Linked to Zero-Click Spyware Attacks

An Israeli digital advertising agency has been linked to a sophisticated surveillance operation that researchers say weaponized ordinary online advertisements to deploy spyware without any user interaction, according to findings from a Canadian university research group.

Citizen Lab, a digital investigations unit at the University of Toronto, identified the firm as Discover-Tech, which markets itself as a specialized digital advertising agency. Researchers allege its software platform, called Controlium, allows clients to mass-profile internet users and then covertly compromise specific targets through so-called zero-click attacks — exploits that require no action from the victim.

Read more UK Autumn Budget 2024: Can You Balance Britain's Books? →

Among the alleged targets was Al Jazeera, the Qatari broadcaster, where Citizen Lab said it believed dozens of devices belonging to staff had been compromised through advertisements served by Discover-Tech. Zero-click spyware is considered among the most dangerous forms of digital surveillance because it leaves victims with no visible warning and no opportunity to avoid infection.

The findings raise fresh concerns about the dual-use potential of the global online advertising ecosystem, which reaches billions of users daily and operates largely through automated, real-time systems that can be difficult for platforms and regulators to monitor. The Citizen Lab disclosure adds to a growing body of research documenting how commercial spyware vendors have allegedly turned widely used digital infrastructure into tools for targeted surveillance.

Continue reading at Business | The Guardian

Frequently Asked Questions

Q.What is zero-click spyware and why is it dangerous?

Zero-click spyware infects a device without requiring the victim to click any link or take any action, making it nearly impossible for users to detect or avoid. Researchers consider it one of the most dangerous forms of digital surveillance.

Q.Who conducted the investigation into Discover-Tech's advertising platform?

Citizen Lab, a digital investigations research unit based at the University of Toronto in Canada, carried out the research linking Discover-Tech's Controlium software to covert spyware delivery.

Q.Which organization was allegedly targeted by spyware delivered through online ads?

Citizen Lab said it believed dozens of devices at Al Jazeera, the Qatari broadcaster, had been compromised through advertisements served by Discover-Tech.

More in policy →