🚨Israeli Firm Uses Ads to Deliver Spyware to 45 Al Jazeera Devices
Ads are now a pipeline for zero-click hacking
TL;DR
Researchers found an Israeli ad tech firm delivering spyware through ads to Al Jazeera, targeting at least 45 devices. The firm's Controlium platform allows precise targeting and infection of devices using ads.
An Israeli firm is using online ads to deliver spyware to devices, including at Al Jazeera. This is the first evidence of a zero-click attack delivered through targeted advertising. The firm's Controlium platform allows spyware companies to target and infect devices using ads, with Google and Beeswax removing the firm from their platforms. Users at high risk should use ad blockers and disable ad tracking. This incident highlights the risks of targeted advertising and the need for better ad security.
Key Points
Researchers found an Israeli firm delivering spyware to 45 Al Jazeera devices via ads in 2024 and 2025.
The firm's Controlium platform allows precise targeting of devices using IP addresses, mobile ad IDs, and browser identifiers.
One of the firm's partners is Candiru, an Israeli spyware company blacklisted by the US government.
Google and Beeswax have removed the firm from their platforms, while IAB Europe suspended it from its list of approved vendors.
Researchers recommend high-risk users use ad blockers and disable ad tracking to avoid targeted spyware attacks.
Why It Matters
This incident affects anyone using targeted advertising, especially news organizations like Al Jazeera. The Controlium platform's ability to precisely target and infect devices via ads poses a significant security risk. Users at high risk should consider using ad blockers and disabling ad tracking to protect themselves.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.