GoKawiilCitizen Lab ties Israeli ad-tech firm Discover-Tech to Candiru spyware delivered via ad auctions
Researchers at the University of Toronto's Citizen Lab identified a technique called 'AdFection' in which an Israeli ad-tech company, Discover-Tech, allegedly exploited real-time ad-bidding systems to deliver spyware without requiring any user clicks. The report says this method was used to help spyware vendor Candiru, now rebranded as Integrity Labs, infect at least 45 devices belonging to Al-Jazeera staff.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings suggest that the online advertising ecosystem's split-second bidding auctions could be repurposed as a covert infection vector, expanding the toolkit available to commercial spyware vendors beyond messaging or browser exploits. Because Candiru has already faced US export restrictions for supplying spyware to foreign governments, the report could intensify scrutiny of ad-tech intermediaries that researchers say may be facilitating such operations, potentially prompting calls for tighter oversight of real-time bidding networks.
- Citizen Lab describes a zero-click spyware delivery method called 'AdFection' exploiting ad auctions.
- Discover-Tech is alleged to have enabled Candiru (now Integrity Labs) spyware to infect 45+ Al-Jazeera devices.
- Candiru was previously placed on the US Commerce Department's Entity List for spyware exports.
YubiKey 5 Series security key — Zero-click spyware delivered via ad networks underscores how little user action is needed for compromise, making strong device and account hardening essential. A hardware security key like the YubiKey adds a phishing-resistant layer of protection for your most sensitive accounts, reducing the damage if a device is ever compromised.
See YubiKey 5 Series security key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Jai Vijayan, 2026-10-19
Published there as: “'AdFection' Turns Ad Impressions Into Zero-Click Spyware Delivery”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.