Government Spyware Found Using Online Ads for Zero-Click Attacks
Security researchers from The Citizen Lab at the University of Toronto have uncovered a new method by which government-backed spyware is being delivered through online advertisements. An Israeli firm, Discover-Tech (ticker: not listed), has been found to facilitate these attacks using its advertising platform called Controlium. This allows zero-click spyware developers like Candiru and Bindecy to target specific devices globally without user interaction. The report revealed that at least 45 Windows computers belonging to Al Jazeera were infected via malicious ads in 2024 and 2025 using Candiru's spyware. The researchers noted this is the first confirmed case of government-backed zero-click attacks being delivered through online advertising, raising concerns about global device security. Discover-Tech’s platform left sensitive data exposed, including login records for its Controlium dashboard and billions of ad bidding logs showing ads displayed on devices used by governments and critical infrastructure. While it is unclear if all these exposures led to infections, the findings highlight a significant escalation in how spyware can be deployed through digital advertising networks.
