‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Citizen Lab researchers reveal a worst-case scenario: spyware infecting devices via digital ads. 45 Al Jazeera devices were targeted with zero-click attacks delivered by ads.
Intelligence analysis by Qwen 2.5 (3B)
Citizen Lab researchers uncover a worst-case scenario where spyware infects devices via digital ads, raising concerns about the security of online browsing.
Imagine if ads on websites could secretly plant a tiny computer program on your phone without you knowing. This program could watch what you do on the internet and send that information to bad guys. That's what happened in this story, and it's a big problem because it's hard to stop these ads from doing this.
Analysis
{"heading_1":"The AdFection Campaign","paragraph_1":"Google terminated Discover-Tech’s registration after collaborating with Citizen Lab and researchers from the cybersecurity firm Confiant and confirming a spyware link. Google also set up Safe Browsing warnings to help protect people if they navigate to websites linked to this group.","paragraph_2":"The European branch of the Interactive Advertising Bureau (IAB) confirmed to WIRED that it has suspended Discover-Tech from its global vendor list, known as the GVL. The company was suspended by IAB Europe following an audit of its policies.","paragraph_3":"Beeswax, an online advertising industry company owned by Comcast, removed Discovery-Tech from its platform following recent activity and independent validation by a third-party security specialist. They maintain a zero-tolerance policy for malicious advertising.","heading_2":"The Ad Ecosystem and Zero-Click Attacks","heading_3":"Industry Responses"}
Key points
- Citizen Lab researchers found evidence of a worst-case scenario where spyware infects devices via digital ads.
- The infected devices were linked to the Israeli advertising firm Discover-Tech and the Israeli developer Candiru.
- The ads were shown in more than 70,000 mobile apps and more than 120,000 websites between March and June.
- Google and the European branch of the IAB have taken action to block Discover-Tech from their platforms.
- Beeswax removed Discovery-Tech from its platform following recent activity and independent validation by a third-party security specialist.
As more companies and organizations take action to secure their ad platforms and vet their partners, we can hope to see fewer of these zero-click attacks in the future.
Until the ad industry takes stronger measures to prevent this kind of attack, we will continue to see more devices infected with spyware just by using websites or apps that display ads.
