The investigation centers on Discover-Tech, an Israeli firm that researchers describe as a bridge between legitimate advertising vendors and the mercenary spyware ecosystem. By utilizing a platform known as Controlium, spyware providers like Candiru and Bindecy have successfully targeted specific individuals without requiring any user interaction, such as clicking a link or opening a message. Citizen Lab identified at least 45 compromised Windows computers at Al Jazeera between 2024 and 2025 as a direct result of these malicious advertisements.
Security experts discovered that Discover-Tech left its own infrastructure exposed, including source code and user login records, which allowed researchers to map the platform’s capabilities without authorization. Bidding data revealed that these ads appeared on tens of thousands of websites and apps, reaching devices associated with the International Atomic Energy Agency, the International Criminal Court, and various national cyber agencies. While it remains unconfirmed which governments commissioned these specific attacks, the findings highlight a systemic vulnerability in the ad-tech industry. Senior researcher Bill Marczak warned that this is likely only the beginning of such operations, urging high-risk individuals to disable ad tracking or deploy ad-blockers to mitigate the risk of invisible infection.
Comments (0)
No comments yet. Be the first!