Israeli Ad Tech Firm Delivered Spyware via Online Ads, Researchers Find
Researchers find an Israeli ad‑tech firm used online ads to deliver spyware in a zero‑click attack, affecting outlets like Al Jazeera.
Tech
Security researchers from Citizen Lab and Confiant have uncovered that an Israeli advertising technology company collaborated with spyware vendors to infect devices simply by displaying online advertisements. The investigation revealed that the malicious code could be delivered without any user interaction, a technique known as a zero‑click attack.
The researchers documented infections on several targets, including the news organization Al Jazeera, demonstrating that the ad‑based delivery method can reach high‑profile media outlets. This marks the first instance where technical evidence of a zero‑click attack has been linked to online advertising infrastructure.
The findings highlight a new vector for espionage and surveillance, where ordinary web ads become a conduit for covert malware. The joint study calls for greater scrutiny of ad‑tech supply chains and stronger defenses against hidden threats embedded in digital advertising.
Why It Matters
The discovery shows how everyday online ads can be weaponized, raising security concerns for media outlets and internet users across the US and Europe.
