An Israeli firm is sending zero-click spyware through online ads

An Israeli ad tech firm called Discover-Tech has been found working with spyware companies, including the blacklisted Israeli firm Candiru, to deliver zero-click malware through online advertisements—marking the first documented case of such attacks via targeted ads. The platform, known as "Controlium," allowed attackers to target and infect devices at organizations like Al Jazeera without requiring any user interaction, affecting at least 45 devices at the news outlet in 2024-2025. Major platforms including Google and Beeswax have since removed Discover-Tech, while researchers recommend users employ ad blockers and disable ad tracking to protect against such attacks.