Google blocks ad firm linked to spyware attacks on phones
Developing story first seen 2 hours ago
Google has blocked Discover-Tech from its advertising platforms after an investigation linked the firm’s ads to spyware, while IAB Europe suspended it from its global vendor list. The actions follow findings by Citizen Lab that targeted adverts were used to infect phones without their owners clicking or taking any other action.
Researchers say 45 devices belonging to Al Jazeera were targeted in 2024 and 2025. They linked the ads to Israeli-founded Discover-Tech and the spyware to Israeli developer Candiru; the findings provide the first detailed public technical evidence of sophisticated spyware delivered through digital ads. Google also set up Safe Browsing warnings for websites linked to the group, while researchers say blocking ads is one of the few protections available to users.
- Google blocked Discover-Tech after a spyware investigation.
- Citizen Lab found 45 Al Jazeera devices were targeted.
- Ads allegedly delivered Candiru spyware without user interaction.
New here? Start with this
Spyware is software designed to secretly monitor a phone or collect information from it. Some attacks require a person to click a link or install an app; “zero-click” attacks can infect a device without the owner doing anything.
Online adverts are selected and delivered through a network of advertisers and technology companies. If that system is misused to deliver harmful code, a phone could be targeted while its owner is simply browsing or using an app, making the attack harder to spot.
Citizen Lab is a research group that investigates digital security and surveillance. Al Jazeera is a news organisation, while Discover-Tech and Candiru are companies researchers linked to the reported advertising campaign and spyware; the findings matter because they raise questions about how advertising systems can be used to reach specific people.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
The findings raise a serious privacy and security concern: targeted adverts may let spyware reach people’s phones without a click or other action, leaving users little chance to recognise or avoid an attack. Supporters of stronger platform controls and vendor accountability would argue that ad systems should be scrutinised when they can be used to target journalists, and that blocking or suspending implicated firms is a reasonable precaution.
The case against
A cautious response would stress that the reported campaign and its attribution are based on researchers’ technical findings, which should be assessed carefully before conclusions about responsibility or wider prevalence are drawn. Firms and platforms also have an interest in fair processes, clear evidence and proportionate measures, since mistaken or overly broad restrictions could affect legitimate advertising and business activity.
More coverage
Read the full article at the source →
Originally published by Wired as “‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads”.