Israeli Firm Used Ad Network to Deploy Spyware on Al Jazeera Staff

An Israeli company, Discover-Tech, exploited an internet advertising system to distribute spyware capable of covertly infecting user computers, with employees of Qatar-based Al Jazeera television network among the targets, according to a study released October 15 by Citizen Lab at the University of Toronto. Researchers stated that Discover-Tech provided the infrastructure for Candiru, an Israeli spyware developer, to conduct targeted attacks. Between 2024 and 2025, at least 45 Windows computers within Al Jazeera's network were compromised. Citizen Lab confirmed the infections using network activity logs provided by the broadcaster. The spyware could activate simply by displaying an advertisement on a website or mobile app, without user interaction, a method the researchers termed "AdFection." Discover-Tech utilized automated advertising auctions to gather device information, identify owners, and select targets for infection, managing operations through its Controlium platform. The company's reach extended far beyond the Al Jazeera attacks; analysis of nearly four billion ad auction records from March to June 2026 revealed Discover-Tech ads appeared on over 120,000 websites and in 70,000 mobile apps globally, including on devices within government, defense, NATO, and other international organizations. However, researchers cautioned that ad display does not automatically mean infection, and some instances may have only involved data collection. Following the investigation's findings, Google suspended Discover-Tech's access to its ad platforms, and IAB Europe removed the company from its approved vendor list. Other ad market participants, including Comcast's Beeswax, also imposed restrictions. Candiru, now operating as Integrity Labs, was previously sanctioned by the U.S. Commerce Department in 2021 for developing spyware used against journalists, activists, and government officials. Discover-Tech and Candiru did not respond to requests for comment. The identities of those who commissioned the Al Jazeera attacks remain unknown, and the study found no evidence of Israeli state involvement.