Researchers link ads to spyware targeting Al Jazeera devices

Citizen Lab says at least 45 Windows computers at Al Jazeera were targeted in zero-click spyware attacks delivered through online advertisements linked to DiscoverTech, an Israeli advertising company. The devices were apparently attacked in 2024 and 2025, and researchers linked the spyware to Candiru after reviewing network logs shared by the broadcaster. In a report published Thursday, the University of Toronto research group said DiscoverTech operates an advertising platform called Controlium that enabled spyware partners to target devices through ads. The platform’s reported users or partners included Candiru and Bindecy. The researchers say the attacks did not require victims to click a link or open a file; the malicious code could be delivered when an advertisement appeared. The researchers described the Al Jazeera findings as evidence of spyware being delivered through targeted advertising. They have not identified which governments, if any, directed the attacks. DiscoverTech and Candiru did not respond to requests for comment in the reports, while Al Jazeera did not provide comment.