Israeli firm's digital ads enabling installation of 'zero-click' spyware

Israeli advertising firm Discover-Tech has developed software that allows clients to install "zero-click" spyware on unsuspecting internet users, according to researchers at the University of Toronto's Citizen Lab. The software, named Controlium, enables mass-profiling and deanonymization of users, making it possible to covertly infect targets with spyware without any interaction from the victim.

Citizen Lab's research suggests that Discover-Tech has been serving millions of targeted ads since 2024, including in countries like Yemen, Brazil, Mexico, and Czechia. The spyware, delivered through these ads, can access all data on a device, including messages, photos, emails, and call recordings. The researchers warn that the online advertising ecosystem has been weaponized to profile users and silently infect targets, posing a significant security threat to states, businesses, and individuals.