An Israeli firm is sending spyware through online ads, researchers say

<figure> <img alt="A laptop surrounded by green and pink message boxes that say “warning.”" data-caption="" data-portal-copyright="Photo by Amelia Holowaty Krales / The Verge" data-has-syndication-rights="1" src="https://platform.theverge.com/wp-content/uploads/sites/2/chorus/uploads/chorus_asset/file/23318436/akrales_220309_4977_0258.jpg?quality=90&#038;strip=all&#038;crop=0,0,100,100" /> <figcaption> </figcaption> </figure> <p class="wp-block-paragraph">An Israeli ad tech firm worked with spyware companies to infect devices, including at <em>Al Jazeera</em>, by simply showing users an online ad, according to a joint investigation by <a href="https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/">security researchers at Citizen Lab</a> and <a href="https://blog.confiant.com/p/adint-weaponized-ad-tech-for-zero-click-spyware-and-mass-identity-vacuuming">Confiant</a>. It's the first time researchers have found technical evidence of a zero-click attack - a form of hacking that requires no action by users - delivered through targeted advertising, <a href="https://www.nbcnews.com/tech/security/israeli-ad-company-helped-spyware-firm-target-al-jazeera-online-ads-re-rcna602999">as reported earlier by NBC News</a>.</p> <p class="wp-block-paragraph">The ad firm, called Discover-Tech, presents itself as a typical online advertising agency, but researchers say it actually provides a pipeline for hacking groups to plant malicious ads across the web. It operat …</p> <p><a href="https://www.theverge.com/tech/1011956/discover-tech-zero-click-ads-spyware">Read the full story at The Verge.</a></p>