Skip to content
Pakistan Targeted by Israeli Spyware Ad Campaign

Pakistan Targeted by Israeli Spyware Ad Campaign

First seen 24 Oct 2026, 00:44 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 24, 2026 at 01:43 UTC
  • •Pakistan recorded 139 million malicious ad bids linked to Israeli spyware.
  • •Discover-Tech's 'AdFection' method delivered spyware through online ads.
  • •The campaign also targeted government networks and media organizations.

A report by Citizen Lab reveals that Pakistan ranks second globally in malicious ad bids linked to an Israeli spyware campaign, with approximately 139 million bids identified. The campaign, operated by Discover-Tech, utilized a technique called 'AdFection' to deliver spyware via online ads without user interaction. The ads were found on over 100,000 instances on the Pakistani site WhatMobile.com.pk and also reached government-operated networks, although specific networks were not named. The spyware involved is linked to Candiru, now known as Integrity Labs, which has a history of targeting media organizations like Al Jazeera. The report identified a user named 'Pindi' accessing Discover-Tech's platform from Pakistan, but no direct link to a spyware company was established. The scale of this campaign poses significant cybersecurity risks for users in the affected networks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-15
Citizen Lab report published
Citizen Lab disclosed findings on Israeli spyware ad bids targeting Pakistan, revealing 139 million bids.
Phoneworld.Pk

More articles in this cluster (2)

Following this threat?

Track Candiru and Al Jazeera in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 2

Common questions

How can I determine if my network is affected?
Check for ads from Discover-Tech on your platforms and monitor for unusual activity.
What should organizations do to mitigate risks?
Implement strict ad vetting processes and monitor network traffic for suspicious activity.
Is there evidence of active exploitation?
The report does not confirm active exploitation, but the scale of the campaign raises concerns.