In a concerning revelation, researchers from Citizen Lab have uncovered that DiscoverTech, an Israeli advertising firm, has been complicit in enabling spyware companies to target users through online advertisements. This operation has reportedly led to cyberattacks on at least 45 devices associated with the prominent news organization, Al Jazeera.
The investigative report, released recently, marks a significant milestone as it is the first to illustrate how widely-used online advertising platforms can serve as a covert channel for hackers to compromise individuals’ devices without their awareness. The implications of this discovery have raised alarm among cybersecurity experts.
According to Natalia Krapiva, a spyware specialist at Access Now, the findings highlight a troubling reality: “As we browse the internet or use apps, our devices can be vulnerable to malicious attacks without us even realizing it.” She emphasized the need for immediate action from both tech companies and governmental bodies to implement protective measures.
Citizen Lab’s collaboration with Confiant, a U.S.-based advertising security firm, has shed light on how spyware is often marketed under the guise of assisting governments in maintaining national security. However, its application has frequently been misused against journalists, activists, and political dissenters globally.
DiscoverTech operates in Tel Aviv and provides advertising services that allegedly connect clients to genuine online traffic. However, the recent report has accused the company of operating a clandestine program, which allows spyware firms to inject harmful software into users’ devices.
Particularly alarming is the use of “no-click” spyware, which automatically infects a user’s device merely by visiting a compromised website, circumventing traditional security measures. This method was employed in the attacks impacting Al Jazeera’s staff between 2024 and 2025, with the malicious ads reaching an expansive network of nearly 200,000 websites and applications.
In response to the report, several key players in the advertising industry, including Google and IAB Europe, have severed ties with DiscoverTech, effectively prohibiting its ads from appearing on their platforms. The findings have sparked a broader discussion on the unregulated nature of online advertising and the inherent risks it poses.
As researchers stress the importance of protective technologies like ad-blockers, they warn that even these measures may not suffice to shield users from sophisticated cyber threats. The report advocates for users to consider disabling advertising IDs on their devices and utilizing app opt-out features whenever possible, although it acknowledges the challenges in consistently safeguarding against malicious advertisements.
Photo credit: Klaudia Radecka
