Story perspectives

Citizen Lab: “AdFection” Spyware via Ads Infects Al Jazeera

By Drooid · Oct 16, 2026, 10:50 PM UTC · How we work

Summary

Story summary

Discover-Tech, an Israeli advertising firm, delivered zero-click Candiru spyware via targeted online ads.
Citizen Lab labeled the technique “AdFection,” where a malicious ad infects a device on load.
At least 45 Al Jazeera computers were compromised in 2024-2025 after viewing Discover-Tech ads.
The ads ran on over 120,000 sites and 70,000-75,000 apps from March to June 2026.
Google cut Discover-Tech’s ad access; Vungle, Eskimi and IAB Europe also blocked it.

History

Historical Context

In 2010, the Operation Aurora cyber-espionage campaign exploited malicious online ads to infiltrate major tech firms, exposing supply-chain vulnerabilities. Google, Microsoft, and Adobe reported that over 30,000 computers were compromised, prompting a coordinated response from the U.S. Department of Justice. Similarly, Discover-Tech’s 2026 AdFection campaign delivered Candiru spyware through 120,000 sites and 70,000-75,000 apps, compromising dozens of Al Jazeera workstations. These repeated ad-based intrusions have forced platforms like Google and industry groups such as IAB Europe to tighten ad-network vetting, reshaping digital security standards.

1 of 2

Story summary

Discover-Tech, an Israeli advertising firm, delivered zero-click Candiru spyware via targeted online ads.
Citizen Lab labeled the technique “AdFection,” where a malicious ad infects a device on load.
At least 45 Al Jazeera computers were compromised in 2024-2025 after viewing Discover-Tech ads.
The ads ran on over 120,000 sites and 70,000-75,000 apps from March to June 2026.
Google cut Discover-Tech’s ad access; Vungle, Eskimi and IAB Europe also blocked it.

1 / 2