Discover-Tech's Role in Spyware Attack on Al Jazeera Devices
Israeli advertising technology company Discover-Tech has been implicated in a spyware attack on devices used by Al Jazeera, according to a recent investigation by Citizen Lab. This investigation was initiated following Al Jazeera's internal probe into suspicious activities affecting its employees' devices.
Al Jazeera Media Network publicly condemned the targeting of its journalists, describing it as an assault on press freedom and the public's right to information. The network has committed to safeguarding its employees and systems against such intrusions.
The spyware involved in this incident is linked to Candiru, an Israeli firm that was blacklisted by the United States government in 2021 due to its malicious cyber activities. Citizen Lab's report highlights that this incident represents the first known use of a "zero-click" method in targeted advertising to deliver spyware. This technique allows the spyware to infect devices simply by displaying an infected advertisement.
The investigation revealed that Discover-Tech purchased advertisements embedded with spyware, which then directed devices to Candiru's malware. Al Jazeera journalists were among the millions targeted, including those covering sensitive topics.
The unusual patterns on devices used by some Al Jazeera journalists were first detected by the network's technology team in 2024, with the investigation into these anomalies continuing into 2025. Al Jazeera subsequently sought assistance from Citizen Lab to further investigate the potential spyware activity.
Citizen Lab's Findings on Spyware Deployment
Citizen Lab's analysis of network logs provided by Al Jazeera during the attack period revealed a clear timeline of how the spyware was deployed. Al Jazeera noted that this collaboration was crucial in verifying the attacks and documenting them publicly.
The zero-click nature of the spyware means that once an infected advertisement is displayed on a device, that device becomes compromised, allowing the attackers to access and transmit all available data back to them.
Intelligence Reviewed
In a separate report, New York-based advertising security firm Confiant indicated that some of Discover-Tech's advertisements were also found on critical networks utilized by the Pentagon, the United Nations International Atomic Energy Agency, and the International Criminal Court.
Candiru's spyware has a history of being used to surveil at least 100 journalists, dissidents, and others across various countries, raising significant concerns about privacy and security in the digital age.
