ON
← Back to feed
'Ad blocker mandatory': devices can be hacked without clicking on an ad
Germany🏛️ PoliticsLean Progressiveyesterday

'Ad blocker mandatory': devices can be hacked without clicking on an ad

A study by the Citizen Lab at the University of Toronto has revealed that online advertisements can be used to hack devices without requiring any user interaction. This method, termed 'AdFection,' involves malicious ads that automatically install spyware on users' devices. The research focuses on the Israeli firm Discover-Tech Ltd., which appeared to be a legitimate advertising technology provider but was allegedly involved in facilitating state-sponsored malware distribution through its platform Controlium. The study suggests that Discover-Tech acted as a bridge between the online advertising ecosystem and the industry producing surveillance tools. Researchers have identified evidence linking Discover-Tech to the distribution of Candiru trojans via malicious ads targeting devices associated with Al Jazeera. Despite inquiries from netzpolitik.org and the Bavarian Broadcasting Company, Discover-Tech did not respond.

Go to the primary sources (7)

The official sources this coverage is built on. Read them directly to bypass framing.

4 reports

Tagesschau (ARD) logoTagesschau (ARD)State / PublicCenteryesterday
Spyware method uncovered: Spying software through online advertising

A report by BR and netzpolitik.org reveals that an Israeli firm allegedly used online advertising to distribute spyware. The targets were reportedly international organizations, states, media outlets, and companies. This method involves using digital ad networks to deliver malicious software disguised as legitimate content. The practice raises concerns about cybersecurity and the potential misuse of online platforms for surveillance purposes. The findings highlight the growing threat of state-sponsored cyber espionage through commercial channels.

Bias read (Center): The article presents factual information without overtly favoring any side. It reports on alleged activities by an Israeli firm without taking a stance on the implications or assigning blame. The framing remains neutral, focusing on the technical method and reported targets rather than making value-

netzpolitik.org logonetzpolitik.orgIndependentCenteryesterday
Attack on Al Jazeera: The Trojan came from an online advertisement

Researchers from the University of Toronto's Citizen Lab have reported that unknown actors infected devices belonging to the Qatari news channel Al Jazeera using a state-sponsored malware called Candiru through online advertising. This method, dubbed 'AdFection,' involves exploiting online ad infrastructure to deploy malicious software without requiring user interaction. At least 45 Windows devices were reportedly compromised in this attack, marking the first publicly documented case of AdFection. The attackers allegedly used the Israeli company Discover-Tech Ltd., which appears to operate as a normal online advertising firm but is suspected of providing a platform for distributing spyware via ads. Al Jazeera has not yet commented on the findings, though it was previously targeted by similar attacks in 2020.

Bias read (Center): The article presents a factual report based on research conducted by the Citizen Lab at the University of Toronto. It does not take a clear stance on the geopolitical implications of the attack, nor does it favor any particular side in the narrative. The focus is on technical aspects of the cyber-攻击

netzpolitik.org logonetzpolitik.orgIndependentProgressiveyesterday
'Ad blocker mandatory': mobile phones can be hacked without clicking an ad

A study by the University of Toronto reveals that malicious online advertisements can be used to infect devices with spyware without requiring any user interaction. The method, dubbed 'AdFection,' involves seemingly harmless ads, such as offers for wireless headphones, that are actually designed to exploit vulnerabilities in mobile devices and computers. Researchers identified the Israeli firm Discover-Tech Ltd. as potentially facilitating these attacks by acting as a bridge between online advertising platforms and state-sponsored malware distributors. The research suggests that at least some of these zero-click attacks targeted devices belonging to the Qatari news outlet Al Jazeera. Experts warn that the current structure of online advertising poses significant security risks to governments, private sectors, civil society, and individuals.

Bias read (Progressive): The article highlights a critical vulnerability in digital infrastructure that could be exploited by state actors, emphasizing the need for stronger protections against surveillance and cyber threats. It frames the issue as a systemic failure in online advertising systems, which is often associated

netzpolitik.org logonetzpolitik.orgIndependentProgressiveyesterday
'Ad blocker mandatory': devices can be hacked without clicking on an ad

A study by the Citizen Lab at the University of Toronto has revealed that online advertisements can be used to hack devices without requiring any user interaction. This method, termed 'AdFection,' involves malicious ads that automatically install spyware on users' devices. The research focuses on the Israeli firm Discover-Tech Ltd., which appeared to be a legitimate advertising technology provider but was allegedly involved in facilitating state-sponsored malware distribution through its platform Controlium. The study suggests that Discover-Tech acted as a bridge between the online advertising ecosystem and the industry producing surveillance tools. Researchers have identified evidence linking Discover-Tech to the distribution of Candiru trojans via malicious ads targeting devices associated with Al Jazeera. Despite inquiries from netzpolitik.org and the Bavarian Broadcasting Company, Discover-Tech did not respond.

Bias read (Progressive): The article highlights a significant cybersecurity threat involving state-sponsored malware distributed through online advertising, implicating a private Israeli firm. It emphasizes the risks posed to individuals, governments, and civil society, suggesting systemic flaws in current digital security.

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories