Israel Accused of Cyber Espionage Targeting Arab Media Outlets
Translated & summarized from Arab48 by baba
Canadian firm Citizen Lab reported that an Israeli digital advertising agency, Discover-Tech, used malicious online ads to install spyware on Al Jazeera journalists' devices between 2024 and 2025. This method exploited vulnerabilities without requiring user interaction, marking a new form of commercial espionage. Al Jazeera condemned the attack and called for accountability. Experts warn this is part of a pattern targeting media and advise increased cybersecurity awareness and caution with unknown links and files.
The story in 6 lines · by baba
- Israeli firm Discover-Tech allegedly used malicious ads to install spyware on Al Jazeera journalists' devices.
- The espionage method exploited vulnerabilities without requiring users to click on ads or links.
- Citizen Lab documented the infiltration, which occurred between 2024 and 2025.
- Al Jazeera condemned the attack and called for accountability for the perpetrators.
- Experts warn this is part of a broader trend of targeting media outlets perceived as threats.
- Users are advised to avoid unknown links and files and enhance cybersecurity awareness.
A recent report by Canadian cybersecurity firm Citizen Lab has shed light on an alleged Israeli espionage attempt targeting devices belonging to Al Jazeera journalists. The incident, which occurred between 2024 and 2025, involved the Israeli digital advertising agency Discover-Tech using a vast network of online advertisements to track and infiltrate targeted devices. This marks the first publicly documented technical evidence of commercial espionage attacks conducted in this manner.
The sophisticated method employed meant that targets did not need to click on suspicious links or ads; the mere appearance of a specially crafted advertisement could trigger malicious code, exploit security vulnerabilities, and install spyware. Discover-Tech allegedly facilitated the delivery of spyware developed by Candiru, now known as IntSights Labs, to Al Jazeera's devices. Ron Deibert, founder and director of Citizen Lab, stated in an interview with Al Jazeera that the channel's IT team's cooperation was crucial in verifying the infiltration via malicious ads.
Al Jazeera Media Network condemned the targeting of its employees' devices in a statement last Thursday, emphasizing its ongoing efforts to protect its staff and systems. The network called for accountability for those responsible. Deibert noted that approximately 24 news organizations globally received ads from Discover-Tech, highlighting the potential for journalists' sources and ongoing stories to be exposed.
Mohsen Khadisi, a Moroccan academic specializing in artificial intelligence and information security, described the incident as part of a recurring pattern of targeting media outlets perceived as threats by adversaries. He stressed that such attacks are not isolated and that media, as a soft power and a first line of defense for societal values, is a prime target for those seeking to silence dissent or protect specific interests. Khadisi pointed out that the use of Israeli spyware is not new, referencing past infiltrations of heads of state and senior officials using the infamous Pegasus spyware.
Khadisi advised users, particularly journalists, to adopt stringent security measures, including completely refraining from opening links or files from unknown or untrusted sources. He also called for increased cybersecurity awareness among media professionals and the development of advanced digital protection strategies to counter evolving threats. The report also noted broader cyber threats in the region, with the UAE and Jordan reporting thwarted attacks on various sectors in recent months.