Just when we thought targeted ads couldn't get any worse, these were found serving malware

Date:
Sat, 17 Oct 2026 16:05:00 +0000

Description:
Al Jazeera journalists were infected, but the number of victims could be a
lot bigger.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Researchers uncovered a zero-click spyware campaign delivered through online advertisements,
requiring no user interaction Journalists devices were infected with surveillance malware capable of stealing data, messages, audio, and video Investigation linked the operation to Israeli firms tied to ad-tech infrastructure and commercial spyware Imagine this: Youre a journalist. You get to work, log into your computer, and go about your daily activities.
While browsing the internet, you see an ad for earbuds. You dont click the
ad, you dont even view it with interest. You just get it served, much like
any other ad on the internet, and scroll away to continue with your day.

But the moment the ad was served, through it your computer was infected with
a powerful infostealer. The malware harvested all sorts of sensitive data, including files, documents, cookies, bookmarks, even saved credentials. It captured your keystrokes, took screenshots while you were working, and was even able to use your microphone and camera to record you while you were working. Email messages, as well as instant messages shared through a wide range of platforms, were picked up and exfiltrated, as well. Latest Videos From TechRadar Watch full video here: Mission impossible While this might sound like a scene from a Mission Impossible movie, unfortunately its completely real. The victims in this story are Al Jazeera journalists (among others). In 2024, some of the journalists noticed their devices acting strange, so they reached out to Canadian cybersecurity firm Citizen Lab, who confirmed the first-ever case of zero-click mercenary spyware attack that was delivered through online ads. Theyre calling it AdFection.

Both Al Jazeera and Citizen Lab have released their findings, and while the question of who might be attacking journalists remains unanswered, the researchers know who facilitated it - two Israeli companies, one of which has been on the US blacklist for half a decade now. You may like Experts warn cheap Android phones are being shipped with malware built in, so be on your guard Even connected car head units are being targeted by hackers now
experts warn in-car systems are at risk of being hijacked into a botnet Security experts targeted by fake crypto conference in scam to hand over details

The two companies are called Candiru and Discover-Tech. The former is a mercenary spyware company that sells sophisticated surveillance tools to government customers. They were the ones who built the infostealer and the delivery mechanism. The researchers did not say who bought the tool and who was spying on the journalists, but they did say that the infostealer cost several million dollars.

Candiru is now known as Integrity Labs, following a rebranding and reported acquisition. The US Department of Commerce blacklisted it in early November 2021, citing evidence that it supplied spyware to foreign governments that used it to target government officials, journalists, activists, and others. However, it seems Candiru was delisted in late July, 2026. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get
all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

The second company in the infection chain is Discover-Tech. It is an Israeli ad-tech company operating MyDSP, a demand-side platform that purchases
digital advertising inventory through automated ad exchanges. So allegedly, the ads carrying Candirus malware were served through Discover-Techs infrastructure.

The discovery raised questions if Discover-Tech was ever a legitimate business, or just a cover for a highly sophisticated cyber-espionage
campaign. Who are the targets? We present technical evidence that the Israel-based company Discover-Tech, while purporting to be a legitimate advertising company, appears to be a front for large-scale ad espionage abuse," Citizen Labs researchers wrote. In fact, it appears that serving as this bridge is Discover-Techs primary purpose. What to read next Some Mac users think they're installing OpenAI Codex, but it's actually a malware that can steal passwords in seconds This Russian cybercrime campaign can infect a user just by viewing an email US military troops can still be hit by targeted attacks despite disabling ad tracking on their devices and leaders aren't happy

The company was listed with both Google and IAB Europe as an approved vendor from 2020, The Register reported. Citizen Lab analyzed roughly four billion ad-bidding records and found Discover-Tech ads on more than 70,000 mobile
apps and 120,000 websites in Q2 2026, alone.

So the question now is - how many people are affected, and where do they
work?

Citizen Lab says that at least 45 devices belonging to Al Jazeera were compromised this way in 2024 and 2025. Citing data from New York-based advertising security firm Confiant, The Register reported that some of Discover-Techs ads also appeared in critical networks used by the Pentagon, the United Nations International Atomic Energy Agency, and the International Criminal Court - the same court that in 2024 issued an arrest warrant against Israeli Prime Minister Benjamin Netanyahu, alleging responsibility for war crimes and crimes against humanity.

Via The Register The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/just-when-we-thought-targeted-ads-could nt-get-any-worse-these-were-found-serving-malware


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)