Israeli Spyware Firm's Targeted Ad Attacks Pose Global Security Threat
It has been revealed that an Israeli spyware company named Candiru orchestrated zero-click attacks that require no user intervention by utilizing advertising infrastructure, targeting Al Jazeera employees.
Researchers have discovered that Israeli spyware firm Candiru carried out zero-click attacks—hijacking devices without requiring users to click on anything—through an advertising firm named Discover-Tech. In June 2025, 45 devices belonging to Al Jazeera staff were targeted using this method.
Details of the Zero-Click Attack
Visiting a page or refreshing an app can be enough to fall victim to a malware attack where personal data is stolen from laptops and phones. Researchers noted that this is the first known zero-click malvertising case.
Al Jazeera Employees Targeted
In June 2025, 45 devices used by Al Jazeera personnel were targeted with spyware installed without the need to open or download any files. The Al Jazeera Media Network condemned the targeting of its personnel and demanded accountability.
The Discover-Tech and Candiru Connection
An investigation conducted by Citizen Lab, a Canada-based academic research unit, revealed that the Israeli company Candiru was behind the attacks. Discover-Tech, which appeared to be a legitimate advertising firm, purchased malicious ads to identify targets and redirect them to Candiru's server.
Global Security Risk and History
The Candiru company was blacklisted by the United States government in 2021. Cybersecurity experts state that the current advertising system can deliver code to billions of screens without adequate security oversight, posing a global threat.