GoKawiilCitizen Lab links Israeli ad firm Discover-Tech to zero-click spyware attack on Al Jazeera
Citizen Lab researchers say they found the first confirmed case of a zero-click spyware campaign, delivered through an advertising platform called Controlium run by Israeli firm Discover-Tech. The platform allegedly let advertising partners identify and de-anonymize targets, then silently download spyware such as Candiru onto victims' machines, including computers at Al Jazeera. Citizen Lab says Discover-Tech's ads appeared across roughly 200,000 websites and apps, funneling traffic toward servers tied to Candiru as part of a broader tracking operation.
GoKawiil's interpretation of the reporting above, not reported fact.
If confirmed, this would show that spyware can be delivered through ordinary ad networks without any user click, a capability previously considered mostly theoretical, which could force a rethink of how advertising supply chains are vetted for security risks. Discover-Tech's status as a Google-certified, GDPR-compliant vendor suggests existing vetting standards may not catch this kind of abuse, raising questions for ad platforms and regulators about oversight of ad-tech intermediaries. The targeting of a major media organization also points to possible state or state-linked interest in surveilling journalists, though Citizen Lab has not attributed the operation to a specific government.
- Citizen Lab says it found the first public evidence of zero-click spyware delivered via online ads.
- Israeli ad firm Discover-Tech's Controlium platform allegedly enabled target identification and spyware installation, including Candiru, on Al Jazeera computers.
- The ads reportedly ran across about 200,000 sites and apps despite Discover-Tech being a Google-certified, GDPR-compliant vendor.
NordVPN Threat Protection Pro — Given how malicious ads can silently track and compromise devices without any clicks, a tool that blocks trackers and malicious ad scripts before they load is a smart layer of defense. NordVPN's Threat Protection feature filters out harmful ads and trackers while you browse, reducing exposure to exactly the kind of ad-based attack vector described in this story.
See NordVPN Threat Protection Pro on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: techspot.com — Alfonso Maruccia, 2026-10-16
Published there as: “Researchers say an ad platform could identify targets and install spyware through online ads, no click needed”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.