flash on Nostr: ⚡️🚨 TECH - Online ads can apparently do a lot more than track you. Citizen Lab ...
⚡️🚨 TECH - Online ads can apparently do a lot more than track you.
Citizen Lab has uncovered a technique called “AdFection” that uses targeted advertising to deliver zero-click spyware.
The attack works without the victim clicking an ad. A malicious ad can be shown to a specifically targeted device, exploit a vulnerability, and potentially install spyware automatically.
Citizen Lab traced the operation to Discover-Tech, an Israeli ad-tech company whose Controlium platform was used to profile and identify targets before delivering the spyware.
Researchers found evidence that at least 45 devices at Al Jazeera were infected with Candiru spyware between 2024 and 2025.
Discover-Tech’s advertising reached more than 120,000 websites and around 75,000 apps, potentially exposing hundreds of millions of users to the tracking infrastructure.
Google and other advertising companies have since cut ties with Discover-Tech following the findings.
Published at
2026-10-17 21:25:13 UTCEvent JSON
{
"id": "11bcbe52d19489a540255492c1353a741ce34a6237969f919747a5a93bfa38f2",
"pubkey": "4d7842051782e0d3feb034d150adc2b6bae4ee3b49786793bffa468b6f5b96b3",
"created_at": 1792272313,
"kind": 1,
"tags": [
[
"client",
"Primal iOS"
]
],
"content": "⚡️🚨 TECH - Online ads can apparently do a lot more than track you.\n\nCitizen Lab has uncovered a technique called “AdFection” that uses targeted advertising to deliver zero-click spyware.\n\nThe attack works without the victim clicking an ad. A malicious ad can be shown to a specifically targeted device, exploit a vulnerability, and potentially install spyware automatically.\n\nCitizen Lab traced the operation to Discover-Tech, an Israeli ad-tech company whose Controlium platform was used to profile and identify targets before delivering the spyware.\n\nResearchers found evidence that at least 45 devices at Al Jazeera were infected with Candiru spyware between 2024 and 2025.\n\nDiscover-Tech’s advertising reached more than 120,000 websites and around 75,000 apps, potentially exposing hundreds of millions of users to the tracking infrastructure.\n\nGoogle and other advertising companies have since cut ties with Discover-Tech following the findings. \nhttps://blossom.primal.net/4b339e68b047dfc7556aa16b390f6c89cd5bb8696062e15d1188ab9f966acb6b.jpg",
"sig": "94edea8005e002e2461f271742de948f2a6197ee37721f847a6f8354e298ddbd1b195e7adb25caead9d682caf17e9b96a9ac0116eb17dc3c460e6b7f26b9a137"
}
