GoKawiilCitizen Lab links Israeli ad firm Discover-Tech to zero-click spyware deployed via online ads
University of Toronto's Citizen Lab reports that Discover-Tech, an Israeli digital advertising agency, runs a platform called Controlium that profiles and deanonymises internet users through ordinary-looking ads, then enables third-party spyware firms to silently infect selected targets' devices without any click. Researchers say dozens of devices at Al Jazeera were compromised this way, and that millions of users worldwide have been served Discover-Tech ads since 2024, including in Yemen, Brazil, Mexico and Czechia.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings suggest the online advertising supply chain, built to track and target users for marketing, can double as an espionage delivery mechanism, bypassing the need for victims to click a link or open a file. Related research from Confiant indicating that Discover-Tech ads reached networks of government agencies, the UN, Nato, the ICC and the IAEA points to a potentially broad surveillance exposure beyond journalists, though the extent of actual compromise at those institutions is not established. This could intensify scrutiny of ad-tech intermediaries as a vector for state-linked or mercenary surveillance.
- Citizen Lab says Discover-Tech's Controlium platform can profile and deanonymise users via ads, then trigger zero-click spyware installs.
- Dozens of Al Jazeera devices are reported to have been compromised through this ad-based method.
- Discover-Tech ads have reportedly reached millions of users since 2024, including networks tied to governments, the UN, Nato, the ICC and the IAEA.
Source: theguardian.com — Aisha Down, 2026-10-15
Published there as: “Israeli firm's digital ads enabling installation of 'zero-click' spyware”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.