Skip to content
World edition
Analyst Newspaper
Technology · Multi-perspective analysis

Researchers: Israeli ad firm's network used to deliver zero-click spyware

Researchers say an Israeli advertising firm's network was used to deliver spyware to targets' phones without any click required, with outlets emphasizing different aspects of the findings.

Analysis deskEditor Andersson Iyke
9 outlets, 5 regions
ShareWhatsAppXLinkedInTelegramFacebookImage

What happened

Citizen Lab, a research unit at the University of Toronto, reported that Israeli digital advertising agency Discover-Tech operated a network of online ads capable of delivering zero-click spyware, which can infect devices without any action from the target.1359

The researchers said dozens of devices belonging to the Qatari broadcaster Al Jazeera were compromised through ads served by Discover-Tech.18

The Jerusalem Post reported that Discover-Tech's services gave Candiru, a spyware firm blacklisted by the US government, and other surveillance firms access to advertising platforms operated by Google, Comcast and Yandex.2

Politico Europe reported that EU and NATO websites displayed ads linked to the Israeli hacking software, and that millions of phones were exposed to the operation.6

What's agreed

Reported consistently by outlets in more than one region.

  • Researchers at Citizen Lab, a digital investigations unit at the University of Toronto, found that Israeli digital advertising agency Discover-Tech served online ads that could deliver zero-click spyware to targets' devices without any interaction from the victim.13589
  • Citizen Lab found that dozens of devices at the Qatari broadcaster Al Jazeera were compromised by spyware delivered through ads run by Discover-Tech.18

How it's framed

What each perspective puts first, based on headlines and summaries.

PerspectiveHow it readsWhat it puts first
US technology pressNorth AmericaWired reported that Citizen Lab released, for the first time, technical evidence of sophisticated mercenary spyware being distributed via online advertising; TechCrunch reported Citizen Lab's finding that governments were among those abusing online ads to deploy such spyware.38first technical evidence, mercenary spyware, government abuse of ad networks
European outletsEuropeCoverage ranges from technical framing, with the Financial Times naming the 'AdFection' technique, to institutional framing, with Politico Europe highlighting EU and NATO website exposure, to the Guardian's focus on Al Jazeera as a named target.169technique naming, institutional exposure, Al Jazeera as target
Israeli outletMiddle East & TurkeyThe Jerusalem Post foregrounds the commercial and platform angle, naming specific advertising platforms (Google, Comcast, Yandex) and linking Discover-Tech to the already-sanctioned spyware firm Candiru.2platform access, Candiru link, US blacklist
Wire-syndicated coverage across multiple regionsMiddle East & TurkeyArab News, The Express Tribune and The Straits Times run similar syndicated copy describing a 'vast spy operation' affecting millions, with Arab News noting that Google and IAB Europe have already acted against the company.457vast spy operation, platform response, millions affected

What the coverage leaves out

  • Some outlets, including The Straits Times, describe a 'sprawling network of online ads' without giving a specific figure for ads served or phones exposed, unlike The Guardian and Politico Europe, which cite millions.

Why it matters

The findings raise questions about how online advertising infrastructure, run by major platforms, can reportedly be used as a channel for espionage campaigns, including against a media organization and EU and NATO websites.168

Sources (9)

Every outlet we drew on, grouped by where it is based. Read the originals for the full reporting.

ShareWhatsAppXLinkedInTelegramFacebookImage

More in Technology

Get every side of the day's news.

Join the list for our daily briefing, launching soon.