Discover-Tech used ads to deliver zero-click spyware

Discover-Tech, an Israeli company certified by Google and Microsoft, used online ads to deliver zero-click spyware. The investigation revealed that the company collaborated with espionage groups and targeted users in multiple countries.

The attack required no user interaction, automatically infecting devices and collecting data. The company collaborated with espionage groups, including Candiru, Bindecy and Intelos, and is associated with sensitive networks, such as the US Department of Defense and NATO. The investigation revealed that Discover-Tech served millions of users in 2024, including in Brazil, Mexico and Czechoslovakia.

Al Jazeera journalists were targeted by data collection and malware installation. The company was removed from Google and IAB Europe lists after a joint investigation by Citizen Lab and Confiant. Google blocked Discover-Tech after confirming its collaboration with espionage groups. The finding depends on joint investigations, and the company was removed from credibility lists. Discover-Tech was used to infect users' devices in multiple countries, including Brazil, and the investigation was conducted in 2024.

Discover-Tech used ads to deliver zero-click spyware — Image: pluralistic.net

Discover-Tech, an Israeli company certified by Google and Microsoft, was identified as a delivery platform for a zero-click spyware called AdFection. The discovery was published in outlets such as The Verge, The Guardian and TechCrunch, which highlighted that the attack required no user interaction, automatically infecting devices and collecting data. The campaign, dubbed AdFection, worked on both iPhones and Android devices, and was particularly dangerous because it was zero-click.

A lonely country road with a large roadside billboard. Thrusting out of the billboard is a punching fist with bloody, spiked — Image: pluralistic.net

The article is linked to other publications about companies that use technology for security and advertising purposes, such as the gaming company that launched a new feature for a gaming press platform. The information was revealed by investigations by Citizen Lab and Confiant, published in outlets such as pluralistic, cyberscoop, theverge, theguardian, engadget, winfuture, hwupgrade, clubic, techmeme, computerbild, arstechnica and techcrunch.