Skip to content
Governments Misuse Online Ads for Zero-Click Spyware Attacks

Governments Misuse Online Ads for Zero-Click Spyware Attacks

First seen 15 Oct 2026, 12:33 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 15, 2026 at 12:33 UTC
  • •Discover-Tech is linked to government spyware operations targeting individuals globally.
  • •At least 45 Windows computers at Al Jazeera were hacked using zero-click spyware.
  • •Citizen Lab's findings reveal a significant privacy risk due to the misuse of online advertising.

Citizen Lab reports that government spyware makers are exploiting online advertising networks to deliver zero-click spyware, allowing for covert data theft. The Israeli company Discover-Tech is implicated as a facilitator, enabling targeted attacks on individuals and organizations worldwide. Notably, spyware from Candiru and Bindecy has been linked to these operations, with a confirmed attack affecting at least 45 Windows computers at Al Jazeera in 2024 and 2025. The report highlights the potential for widespread risk, as malicious ads can reach virtually any internet-connected device. Discover-Tech's platform has been shown to connect millions of devices to spyware servers, raising significant privacy concerns. The researchers have also identified a separate threat actor, DARK CARTOGRAPHER, utilizing Discover-Tech's infrastructure for mass surveillance. This marks a concerning escalation in the use of advertising networks for cyber espionage.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2024-01-01
Al Jazeera computers hacked
At least 45 Windows computers at Al Jazeera were compromised using Candiru's spyware via malicious ads.
Techcrunch
2025-01-01
Continued spyware attacks confirmed
Ongoing attacks using Discover-Tech's platform were confirmed, affecting various organizations.
Techcrunch

More articles in this cluster (3)

Following this threat?

Track Candiru and Al Jazeera in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What is zero-click spyware?
Zero-click spyware can infect devices without user interaction, allowing data theft without any action from the victim.
How widespread is the threat?
The threat is significant, as malicious ads can potentially reach any internet-connected device globally.
What can organizations do to protect themselves?
Organizations should consider implementing ad-blockers and monitoring for unusual device behavior to mitigate risks.