Israeli Ad Firm Named as Delivery Channel for Candiru Zero-Click Spyware

· Cybersecurity · Israel

Security researchers have identified Israeli company Discover-Tech as a delivery channel for Candiru spyware, saying its advertising infrastructure allowed threat actors to fingerprint and track devices at scale and then infect selected targets. In the documented campaign, Candiru spyware reached devices at Al Jazeera Media Network through targeted online advertisements in a zero-click attack that required only that the malicious ad be rendered on the victim's device, with no user interaction. The ad network thus served both as a reconnaissance tool and as the infection vector, letting operators pick out specific individuals from a broad audience. The disclosure ties a commercial surveillance vendor to mainstream online advertising plumbing, a combination that complicates attribution and defense for publishers and ad-tech intermediaries.

Why it matters：It exposes how commercial ad-tech infrastructure can be repurposed for state-grade surveillance, raising pressure on ad networks and publishers to vet what they serve.

Key points

  • Discover-Tech's ads let operators fingerprint and track devices at scale.
  • Infection required only that the malicious ad render on the target device.
  • Victims included devices at Al Jazeera Media Network.

Sources (original reporting)

More stories from this day