Ethical Hacking News
Citizen Lab has exposed a shocking truth behind the use of online advertising to deliver spyware networks. The investigation found that Discover-Tech, a company linked to Israeli spyware vendor Candiru, had been using its MyDSP platform to deliver spyware without requiring users to click anything. The report highlights the potential risks of online advertising and emphasizes the importance of treating it as a potential attack surface. Learn more about the dangers of online advertising and how it can become an operational tool for espionage.
Citizen Lab released a report exposing the use of online advertising to deliver spyware networks.Spyware vendors like Discover-Tech and Candiru have been using online ad infrastructure to profile targets without requiring users to click anything.The investigation found that Discover-Tech's infrastructure served multiple customers, including surveillance companies.Google and IAB Europe terminated Discover-Tech's operations due to its links to the surveillance industry.Online advertising can be a potential attack surface, especially on devices used by high-clearance personnel.Security teams should review traffic generated when advertisements load for suspicious connections or scripts.Online advertising can be used for espionage under the right conditions, posing a significant threat to user privacy.
Citizen Lab has released a groundbreaking report exposing the shocking truth behind the use of online advertising to deliver spyware networks. The report, titled "Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks," reveals that spyware vendors have been using online ad infrastructure to profile targets and deliver exploits without requiring users to click anything.
The investigation, which examined almost four billion advertising bid records covering March to June 2026, found that Discover-Tech, a company linked to Israeli spyware vendor Candiru, had been using its MyDSP platform to bid on nearly 3.77 billion ad impressions and win about 442 million. The advertisements appeared across more than 120,000 websites and 70,000 mobile apps.
The researchers also identified links involving other surveillance companies, including Bindecy and Intelos, suggesting that Discover-Tech's infrastructure served more than one customer. The report highlights the potential risks of online advertising, which can expose hundreds of millions of people to tracking infrastructure.
Citizen Lab's investigation reveals that Discover-Tech's access to major advertising platforms helped its operations appear legitimate. However, the company was eventually terminated by Google and suspended by IAB Europe due to its links to the surveillance industry.
The report emphasizes the importance of treating online advertising as a potential attack surface, particularly on devices used by executives, intelligence personnel, journalists, and employees with access to sensitive systems. Security teams should review traffic generated when advertisements load, looking for unexpected connections to external infrastructure or suspicious scripts.
The larger lesson is that a familiar user experience doesn’t guarantee a safe technical process. A banner promoting a phone or a pair of earbuds may look entirely ordinary, while the code behind it performs tracking or checks whether the device matches a target. The victim doesn’t need to click anything, and that’s precisely what makes this technique difficult to spot.
The report concludes that online advertising is no longer just a privacy concern. Under the right conditions, it can become an operational tool for espionage. This is the central warning from Citizen Lab's investigation.
Related Information:
https://www.ethicalhackingnews.com/articles/Unveiling-the-Dark-Web-of-Spyware-How-Online-Advertising-Became-a-Tool-for-Espionage-ehn.shtml
https://securityaffairs.com/201015/hacking/adfection-beyond-the-click-citizen-lab-exposes-ad-delivered-spyware-networks.html
Published: Thu Oct 15 10:59:36 2026 by llama3.2 3B Q4_K_M
