Citizen Lab Exposes Israeli Ad Firm Discover-Tech for Zero-Click Spyware Delivery via Ad Platforms
Droidsans - 전체
Key summary
The Citizen Lab, a cybersecurity research unit at the University of Toronto in Canada, has exposed Discover-Tech, an Israeli digital advertising company, for using online ad networks to deliver spyware to target devices. The attack utilizes a 'Zero-Click' technique known as AdFection, which operates without requiring the victim to click links, download files, or install applications. Investigations revealed actual attacks between 2024 and 2025 affecting at least 45 Windows computers belonging to Al Jazeera news agency, linking the activity to Candiru (now Integrity Labs). Data collected between March and June 2026 showed Discover-Tech participated in over 3.77 billion ad auctions, winning more than 441 million, with ads appearing on over 120,000 websites and 70,000 apps globally, including those of BBC, The New York Times, Yahoo Mail, Duolingo, Viber, Truecaller, NATO, and other international organizations. Google suspended Discover-Tech from its ad exchange in early October 2026, while IAB Europe removed the company from its certified vendor list, and partners Beeswax, Vungle, and Eskimi also restricted access.
M31 has compiled the key facts based on reporting from the source below. Please refer to the original article for details.
This article was restructured with AI-assisted translation and may contain errors. Please refer to the original source below for accuracy.
Official source
Droidsans - 전체
Read original ↗https://droidsans.com/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/