CONNECT WITH US
Tech

Tech

CitizenLab details new spyware triggered by online advertising

Engadget logo

Published on

Add as a preferred source on Google
CitizenLab details new spyware triggered by online advertising

A new type of spyware dubbed "AdFection" is infecting phones and computers via global online advertising networks, according to a new report from Citizen Lab. The attack is unique in that it can infect devices just by showing an ad, with no need for the victim to click on a link or file. The researchers said that AdFection is the first confirmation of zero-click government-backed spyware attacks being delivered through online ads.

The ad-infiltrating technology was reportedly developed by Israeli company called Discover-Tech. Researchers said it has been used to target journalists and staff at the Al Jazeera news network, along with officials and employees at organizations including NATO, the European Commission, NVIDIA and Arm.

"Discover-Tech has leveraged the advertising ecosystem for years to turn trusted websites and popular apps into a zero-click spyware delivery platform," Citizen Lab senior researcher Bill Marczak told The Financial Times. Discover-Tech presents itself as a legitimate advertising firm but instead serves as a "bridge between ad vendors and the mercenary spyware ecosystem," Citizen Lab's report states

Google was among the major ad platforms targeted by the spyware, but it has now suspended Discover-Tech from its global vendor list. "Following a joint investigation with Citizen Lab and Confiant, Google blocked Discover-Tech from our ad platforms for systematically violating our policies," the company said in a statement.

Targeted online advertising is a highly desirable medium to spread malware because it's prevalent on the web globally. It works though an automated real-time bidding auction system that lets advertisers compete to show ads to specific internet users.


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.