Israeli company used online ads to run spy operation against 'hundreds of millions of people'
An Israeli digital advertising agency named Discover-Tech has been accused of enabling espionage operations by using online ads to track and potentially hack internet users worldwide. Research groups, including Canada’s Citizen Lab and U.S.-based Confiant, revealed that Discover-Tech provided access to major advertising platforms like those operated by Google, Comcast, and Yandex to Candiru, an Israeli spyware firm blacklisted by the U.S. government, and other surveillance entities. These ads, often disguised as promotions for everyday products, reached over 120,000 websites and 75,000 apps, allowing Discover-Tech to identify users and extract personal information, including phone numbers. Some ads were linked to the deployment of Candiru spyware, which reportedly compromised 45 Windows devices at Qatar’s Al Jazeera between 2024 and 2025. The ads were also found across numerous high-profile networks, including the Pentagon, the International Atomic Energy Agency, and the Palestinian territories, where they were described as saturating nearly all websites.
An Israeli digital advertising agency, Discover-Tech, has been linked to a widespread surveillance operation that reportedly targeted hundreds of millions of people worldwide. According to research by Canadian cybersecurity group Citizen Lab and U.S.-based advertising security firm Confiant, the company’s online ads were used to track users and facilitate the deployment of spyware developed by Candiru, an Israeli firm blacklisted by the U.S. government. The ads, often placed on everyday products like phones and earbuds, reached over 120,000 websites and 75,000 mobile applications through multiple partnerships. The findings indicate that Discover-Tech’s ads were embedded in networks associated with numerous high-profile organizations, including the Pentagon, the International Atomic Energy Agency, the International Criminal Court, and the United Nations. They also appeared in networks connected to NATO, the European Commission, and more than a dozen national governments. In the Palestinian territories, the company’s ads were particularly pervasive, with nearly every website displaying a Discover-Tech advertisement, giving the firm extensive visibility into digital activity across the region. Researchers noted that the ads could identify users simply by loading on a website, enabling tracking and, in some cases, the extraction of phone numbers from smartphones. Certain ads were specifically designed to deploy Candiru spyware onto users’ devices. While Confiant stated that these specific ads represented only a small portion of Discover-Tech’s total output, the scale of the firm’s operations suggests a massive potential reach. Citizen Lab confirmed that a variant of Candiru spyware distributed through Discover-Tech’s ads compromised 45 Windows computers at Qatar’s Al Jazeera between 2024 and 2025. This information was verified through network logs shared by the media organization. Al Jazeera condemned the attacks and affirmed it was taking measures to safeguard its employees and infrastructure, urging accountability for those responsible. Google announced it had removed Discover-Tech from its ad platforms following an investigation conducted alongside Citizen Lab and Confiant, citing systematic violations of its policies. IAB Europe, the European association representing the digital advertising industry, suspended Discover-Tech from its list of approved entities after identifying policy breaches during an audit. Discover-Tech, established in 2020, has not publicly responded to inquiries. Efforts to contact its CEO, Dekel Boni, and Candiru’s owners went unanswered. Candiru was blacklisted by the U.S. Commerce Department in 2021 for alleged involvement in targeting government officials, journalists, activists, and academics with spyware. The revelations highlight the dual role of online advertising platforms in both commercial and covert operations, raising serious questions about digital privacy and security. The impact of this surveillance campaign continues to unfold as investigations progress and regulatory actions take shape.
Researchers have uncovered a new type of cyberattack known as 'zero-click' malware, where simply visiting a webpage or refreshing an app can lead to the theft of personal data without requiring any user interaction. This method was allegedly carried out by an Israeli spyware firm named Candiru, which was previously blacklisted by the U.S. government for targeting activists and journalists globally. Al Jazeera journalists were among the victims, with 45 devices reportedly compromised in June 2025. The attack involved malicious advertisements purchased by an Israeli company posing as a legitimate ad firm, which redirected users to an infected server operated by Candiru. Cybersecurity experts expressed concern over the implications of this advanced form of surveillance and data exploitation.
Bias read (Progressive): The article highlights the actions of an Israeli spyware firm and emphasizes the targeting of journalists and activists, suggesting a critical stance toward surveillance practices and their impact on civil liberties. It frames the incident as a significant global security threat and calls for those
An Israeli ad-tech firm named Discover-Tech has been accused of enabling global surveillance by embedding tracking mechanisms into online advertisements. These ads, often disguised as promotions for everyday products, were found across numerous high-profile organizations, including international institutions like the Pentagon, the International Atomic Energy Agency, and the United Nations, as well as media outlets such as Al Jazeera. The firm allegedly provided access to advertising platforms used by major companies like Google and Yandex, allowing Israeli spyware developers like Candiru to deploy malware onto users’ devices. Research groups Citizen Lab and Confiant discovered that these ads could identify users, extract phone numbers, and install spyware, potentially affecting hundreds of millions of people worldwide. The firm’s ads were especially prevalent in the Palestinian territories, granting it extensive visibility into digital activity within the region.
Bias read (Center): The article presents findings from independent research groups without overtly favoring any political side. It describes the actions of a private firm and its potential implications for global surveillance but does not take a stance on the geopolitical ramifications or assign blame to specific state
An Israeli digital advertising agency named Discover-Tech has been accused of enabling espionage operations by using online ads to track and potentially hack internet users worldwide. Research groups, including Canada’s Citizen Lab and U.S.-based Confiant, revealed that Discover-Tech provided access to major advertising platforms like those operated by Google, Comcast, and Yandex to Candiru, an Israeli spyware firm blacklisted by the U.S. government, and other surveillance entities. These ads, often disguised as promotions for everyday products, reached over 120,000 websites and 75,000 apps, allowing Discover-Tech to identify users and extract personal information, including phone numbers. Some ads were linked to the deployment of Candiru spyware, which reportedly compromised 45 Windows devices at Qatar’s Al Jazeera between 2024 and 2025. The ads were also found across numerous high-profile networks, including the Pentagon, the International Atomic Energy Agency, and the Palestinian territories, where they were described as saturating nearly all websites.
Bias read (Center): The article presents findings from independent research groups without overtly favoring any side. It reports on alleged espionage activities involving an Israeli company but does not take a stance on the geopolitical implications or assign blame directly. The framing remains factual and balanced, as
How each side covered it
The same event, grouped by the political lean of the outlets covering it.
progressive
center
conservative
★
How each side covered it
Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.
