Skip to content
Pakistan among top targets of spyware ads from Israeli firm, Citizen Lab

Pakistan among top targets of spyware ads from Israeli firm, Citizen Lab

Thenews.Pk • October 22, 2026

Report reveals an Israeli firm called Discover-Tech sold ad space that carried hidden attack code

ISLAMABAD: Pakistan was one of the most heavily targeted countries by an Israeli company that helped hack Al Jazeera devices through online adverts, according to Citizen Lab, a research group at the University of Toronto.

The October 15 report revealed an Israeli firm called Discover-Tech sold ad space that carried hidden attack code. Citizen Lab calls the technique “AdFection”. Its key finding is that a device could be infected with spyware just by displaying an advert, with no click needed.

Discover-Tech acted as a bridge between spyware makers and the online advertising system, according to the report. Spyware from another Israeli firm, Candiru, now renamed, Integrity Labs, was delivered through these ads. In 2024 and 2025, at least 45 devices at Al Jazeera were targeted this way, the report says. It links the attack to Candiru with high confidence.

The researchers studied nearly four billion bidding records from Discover-Tech’s ad system, covering March to June 2026. 19 percent of the bids were for ads carrying a script that could deliver attack code to a chosen device.

Pakistan ranked second in the world for these bids, with 139 million. Only Yemen, with 457 million, was ahead. The same ads appeared more than 100,000 times on a Pakistani website, whatmobile.com.pk. The report also lists Pakistan among the countries where the ads appeared on government-operated networks, without naming the Pakistani networks.

Citizen Lab also found that a user named “Pindi” logged into Discover-Tech’s control platform exclusively from Pakistan. The researchers say they could not conclusively link the user to any spyware company. Two other unattributed users logged in from India and Italy. A login shows someone used the platform from that country. It does not show anyone there was targeted.

Seeing an ad does not mean a device was hacked. The report says an ad impression “does not in and of itself confirm targeting or infection”. The data also doesn’t show who in Pakistan, if anyone, was chosen as a target.

Still, the researchers say the scale shows a serious risk and urge investigations into whether anyone on the affected networks was infected.

The ads also reached networks linked to Nato, the United Nations and the European Parliament, along with ministries in many countries. Citizen Lab says the problem is built into how online advertising works.

Eliminating terrorism, development top priorities, says Kundi

Elected tribal council proposed for merged districts

Pink ribbon walk in Mansehra highlights breast cancer awareness

JI to relaunch drive against petroleum levy on 23rd

Visa resumption puts Pak-UAE ties back on track

FBR transfers female officers to KP against wedlock policy

Govt Websites Go Dark After AI-discovered Flaw Sparks Security Scramble

Gandapur Hits Back At Salman Akram Raja

Pakistan, Turkiye, Qatar, And Indonesia Ink 'Badr' Defence Cooperation Accord

Punjab 'decides To Expand' Basant Celebrations Province-wide In 2027

Pakistan Overtake Australia To Claim Fourth Spot In ODI Rankings

Orphanage Admin Booked After Teenager's Killing In Multan

ECP Orders Fresh Schedule For Long-delayed Islamabad LG Polls

Pakistan, Maldives Set $200m Trade Target For Two Years

Man Accused Of Running Over Orphaned Boy Killed In Bahawalpur Encounter

Extracted Entities

APT Groups (1)

Attack Types (1)