Israeli Ad Firm's Software Linked to Zero-Click Spyware Attacks
Researchers say Discover-Tech's ad platform enabled covert device hacks, including targeting Al Jazeera journalists in Qatar.
An Israeli digital advertising agency has been linked to a sophisticated surveillance operation that researchers say weaponized ordinary online advertisements to deploy spyware without any user interaction, according to findings from a Canadian university research group.
Citizen Lab, a digital investigations unit at the University of Toronto, identified the firm as Discover-Tech, which markets itself as a specialized digital advertising agency. Researchers allege its software platform, called Controlium, allows clients to mass-profile internet users and then covertly compromise specific targets through so-called zero-click attacks — exploits that require no action from the victim.
Read more UK Autumn Budget 2024: Can You Balance Britain's Books? →
Among the alleged targets was Al Jazeera, the Qatari broadcaster, where Citizen Lab said it believed dozens of devices belonging to staff had been compromised through advertisements served by Discover-Tech. Zero-click spyware is considered among the most dangerous forms of digital surveillance because it leaves victims with no visible warning and no opportunity to avoid infection.
The findings raise fresh concerns about the dual-use potential of the global online advertising ecosystem, which reaches billions of users daily and operates largely through automated, real-time systems that can be difficult for platforms and regulators to monitor. The Citizen Lab disclosure adds to a growing body of research documenting how commercial spyware vendors have allegedly turned widely used digital infrastructure into tools for targeted surveillance.
Continue reading at Business | The Guardian