Report: Weaponized programmatic ads to deliver zero-click spyware

SUMMARY

Discover-Tech weaponized programmatic ads to deliver zero-click spyware, a technique the researchers call "AdFection".

Its Controlium used NOAS servers to serve JavaScript that led to Candiru infections, including Al Jazeera.

Discover-Tech linked to mercenary spyware firms (Candiru, Bindecy) and ADINT vendors (Intelos), enabling mass profiling and deanonymization.

Bidding data show ads in tens of thousands of apps and websites, including government and media networks.

Google and IAB Europe had listed Discover?Tech; platforms removed and blocked it after the probe.

Defenders should block targeted ads on official devices; the ad industry must enforce strict vetting and technical controls.