Researchers at the University of Toronto’s Citizen Lab have uncovered a disturbing new surveillance technique: online ads being used to silently install spyware — no clicks required. They call it AdFection, and say it’s the first confirmed case of mercenary spyware delivered through targeted ads.
At the center, according to the report, is Israel-based Discover-Tech, which calls itself an advertising agency and runs a platform called Controlium. When a user is shown one of its seemingly benign ads, their advertising ID and IP address are sent to Discover-Tech’s servers. If they’re flagged as a target, malicious code is pushed to their device within seconds — invisibly. Citizen Lab found no sign the company does any legitimate advertising.
Citizen Lab says with high confidence that at least 45 Al Jazeera devices were infected this way with spyware from Candiru. Discover-Tech’s ads were also shown on networks at the UN, NATO, and EU institutions, and partner firm Confiant found them on ICC and IAEA networks. An ad impression alone doesn’t prove infection, but researchers say those networks need urgent investigation.
Google and IAB Europe have since dropped Discover-Tech from their certified vendor lists, and Google and Beeswax have cut off its ad access. Researchers are now calling on regulators and lawmakers in the US, Europe, and beyond to investigate the companies involved.
Source: The Guardian
