How Israeli firm’s ‘zero-click’ malware attack poses global security risk

Live updates

1. 1h ago

   Israeli Firm Weaponizes Online Ads for Zero-Click Spyware

   An Israeli firm named Discover-Tech operated a vast espionage campaign by weaponizing online advertising to deliver zero-click malware directly to targeted devices. Researchers uncovered that the technique, dubbed AdFection, enabled mercenary surveillance vendors to track and compromise devices globally without requiring users to click links or view warnings. The operation successfully infected 45 devices belonging to Al Jazeera staff using spyware from the firm Candiru, exposing millions of phones to silent attack vectors through digital ads. Cybersecurity experts warn that this method represents a significant global security risk that is currently outpacing regulatory frameworks.

   Why it matters

   This marks the first public confirmation of zero-click mercenary spyware delivered through targeted advertisements. The discovery highlights how commercial surveillance tools continue to evolve beyond traditional phishing vectors into automated web infrastructure. As regulatory bodies struggle to address these advanced threats, the involvement of firms like Discover-Tech and Candiru underscores the widespread availability of offensive cyber capabilities.

   What is confirmed

   • An Israeli firm named Discover-Tech operated a vast spy operation using online ads to deliver zero-click mercenary spyware.
   • Researchers uncovered that the technique, called AdFection, infected 45 Al Jazeera devices with Candiru spyware without requiring user clicks or warnings.
   • Millions of phones were exposed to the Israeli spyware operation through digital ads.
   • Discover-Tech helps mercenary surveillance vendors track and hack devices around the world.

   Still unconfirmed

   • The zero-click spyware adware delivered to Al Jazeera is linked to Israeli intelligence agencies such as Mossad.

   What to watch next

   • Further disclosures from cybersecurity researchers regarding the full scale of devices and organizations targeted by Discover-Tech
   • Potential regulatory or legal actions against Discover-Tech and related surveillance vendors
   • Additional technical analysis detailing how the AdFection pipeline bypasses standard device security architectures
   Sources used for this update (11)

   1. help.naver.com — Futures Flat As Oil Rebounds After Trump's "Energy Ceasefire" Unravels, Memory Stocks Slide | ZeroHedge
   2. The Citizen Lab — Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware
   3. Reuters — Israeli firm used online ads to run vast spy operation, researchers say
   4. The Guardian — Online ads weaponised to deliver ‘zero-click’ spyware, researchers say
   5. citizenlab.ca — Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen Lab
   6. www.metacurity.com — Spyware turns digital ads into silent attack vectors - Metacurity
   7. Al Jazeera — How Israeli firm’s ‘zero-click’ malware attack poses global security risk
   8. politico.eu — Millions of phones exposed to Israeli spyware operation through online ads, researchers say
   9. SecurityWeek — Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
   10. republicbroadcasting.org — Republic Broadcasting Network » ISRAEL/MOSSAD AT IT AGAIN: ‘ZERO-click’ spyware adware reportedly delivered to Al Jazeera, li....
   11. whowhatwhy.org — There’s a New Global Cybersecurity Threat Outpacing Regulation, and It’s Not AI - WhoWhatWhy
   confidence 95%