Israeli firm used online ads to run vast spy operation, researchers say
Israeli digital advertising agency Discover-Tech spied on internet users through online ads, researchers say. The firm gave access to advertising platforms to spyware company Candiru.
Intelligence analysis by Qwen 2.5 (3B)
Israeli advertising firm Discover-Tech used online ads to spy on internet users and provide access to Candiru, a blacklisted spyware company.
Imagine a company that puts ads on websites. They used these ads to secretly watch people and even put spyware on their phones. This is dangerous because it can be used to spy on important people and organizations.
Analysis
Systemic Security Threat
The way online advertising works today is a systemic security threat, according to Wolfie Cristl, a senior researcher at Citizen Lab. This underscores the importance of addressing the vulnerabilities in the advertising industry.
Candiru's Role
Candiru, a spyware company blacklisted by the US government, used Discover-Tech's ads to target and hack users' devices. This collaboration between the advertising firm and Candiru raises concerns about the potential for widespread espionage campaigns.
Advertisers' Involvement
The reports show how the online advertising business, long a subject of privacy concerns, can also serve as a channel for sweeping espionage campaigns. This highlights the need for stricter regulations and oversight of the advertising industry.
Global Impact
The malicious ads were shown in hundreds of sensitive networks, including the Pentagon, the International Atomic Energy Agency, and the International Criminal Court. This underscores the global reach of the advertising firm's operations and the potential for espionage to occur in various sectors.
Discover-Tech's Ad Campaigns
Citizen Lab reported that Discover-Tech's online ads reached more than 120,000 websites and 75,000 apps. Users who visited sites or used apps with the malicious ads could be identified and tracked by Discover-Tech, which sometimes also tried to extract phone numbers from smartphone users.
Data Sharing and Tracking
Data-sharing arrangements called cookie matching allowed Discover-Tech to track people even beyond the reach of its advertisements. This highlights the potential for advertisers to gather and share user data without explicit consent, raising concerns about privacy and security.
Advertisers' Response
Google, Comcast, and Yandex have all taken action against Discover-Tech, including kicking the firm off their ad platforms and suspending it from their lists of approved vendors. This underscores the need for industry-wide cooperation and accountability to address the security risks associated with online advertising.
The Future of Online Advertising
The story raises questions about the future of online advertising and the need for stricter regulations to prevent espionage. As the advertising industry continues to evolve, it is crucial to ensure that it operates in a secure and transparent manner to protect users' privacy and security.
Key points
- Israeli advertising firm Discover-Tech used online ads to spy on internet users and provide access to Candiru, a blacklisted spyware company.
- The malicious ads were shown in hundreds of sensitive networks, including the Pentagon, the International Atomic Energy Agency, and the International Criminal Court.
- Google, Comcast, and Yandex have all taken action against Discover-Tech, including kicking the firm off their ad platforms and suspending it from their lists of approved vendors.
With stricter regulations and industry cooperation, the advertising industry can continue to grow and innovate while maintaining user privacy and security.
If the advertising industry does not take action to address the security risks, it could lead to widespread spying and compromise of sensitive information.
