Citizen Lab links targeted ads to zero-click spyware on Al Jazeera devices

Summary

Citizen Lab says dozens of Al Jazeera devices were compromised by zero-click spyware delivered through online ads. Al Jazeera reports that an Israeli ad-tech firm helped place the malware; The Guardian identifies the firm as Discover-Tech and says its Controlium software lets clients profile internet users and covertly hack targets. The Hacker News reports that the spyware was made by Candiru and could run when an ad loaded, without action from the user.

Timeline

1. TechCrunch

   15 Oct 2026, 10:00 UTCSource ↗

   TechCrunch reports that Citizen Lab found evidence that dozens of Al Jazeera devices were hacked after being shown malicious online ads, and says governments are abusing ads to deliver zero-click spyware.

2. WIRED

   15 Oct 2026, 10:00 UTCSource ↗

   WIRED reports that zero-click spyware is infecting phones via targeted ads.

3. Financial Times

   15 Oct 2026, 10:00 UTCSource ↗

   The Financial Times reports that new zero-click spyware hacked phones using targeted ads.

4. The Guardian

   15 Oct 2026, 12:15 UTCSource ↗

   The Guardian reports that researchers say Discover-Tech ads enabled zero-click spyware attacks and that the firm's Controlium software lets clients profile internet users and covertly hack targets.

5. The Verge

   15 Oct 2026, 14:10 UTCSource ↗

   The Verge reports that researchers say an Israeli firm is sending spyware through online ads.

6. The Hacker News

   15 Oct 2026, 16:01 UTCSource ↗

   The Hacker News reports that Citizen Lab traced Candiru spyware infections at Al Jazeera to ads, with hidden attack code able to run when an ad loaded without user action.

7. Al Jazeera

   15 Oct 2026, 16:32 UTCSource ↗

   Al Jazeera reports that a Citizen Lab investigation says an Israeli ad-tech firm helped place spyware on its devices, with dozens infected by malware planted through advertisements.