Cybersecurity researchers have identified a concerning method of delivering spyware through online advertising, following an investigation into attacks targeting Al Jazeera devices. Researchers at Citizen Lab said the advertising company DiscoverTech helped spyware developers distribute malicious software through advertisements appearing across popular websites and applications. The investigation linked the operation to cyberattacks affecting at least 45 devices associated with Al Jazeera. According to the findings, the advertisements could expose visitors to spyware without requiring them to click anything. This technique, known as a zero-click attack, can compromise devices without direct action from the user. The researchers described the findings as the first publicly documented evidence showing how online advertising infrastructure could be used to deliver this type of attack. The advertisements reportedly reached nearly 200,000 websites and applications, highlighting the potential scale of the threat. The investigation raises concerns about advertising networks being exploited to distribute surveillance tools. It also underlines the importance of stronger advertising security checks, improved threat detection and continued independent research into spyware operations.
Read more here
