A critical vulnerability in the global online advertising ecosystem has enabled unprecedented digital espionage without requiring victims to click on a single link or download any files. A technical probe conducted by the Canada-based Citizen Lab has revealed that Israeli regime-linked cyber contractor Candiru deployed novel "zero-click" malware delivery techniques, using deceptive web banners to breach laptops and phones belonging to dozens of Al Jazeera journalists and investigators.
The espionage apparatus operated through Discover-Tech, a purported commercial ad agency acting as an intermediary for mercenary spyware operators. Despite nominal oversight frameworks promoted by Western regulators, the entity was routinely approved as a "certified vendor" by Google and the IAB Europe network. Exploiting instantaneous real-time bidding protocols, the system tracked high-profile targets by IP address and device telemetry, instantly forcing vulnerable browsers to contact malicious command-and-control servers operated by Candiru.
Once deployed, the illicit software allegedly harvests extensive private materials, including browser cookies, stored credentials, active keystrokes, and encrypted messages, while also hijacking system microphones and cameras. Although the US regime purported to place Candiru on trade blacklists years ago, the findings underscore the utter failure of Western corporate and governmental controls to rein in commercial surveillance firms operating openly within global programmatic ad exchanges.
The ramifications extend far beyond media rooms. Forensic evidence indicates that Discover-Tech tracking scripts successfully surfaced inside heavily guarded networks belonging to the Pentagon, the NATO regime, and European regime institutions, including the European Parliament and the European Commission. Independent analysts note that systemic industry negligence has turned everyday programmatic advertising into an unregulated superhighway for sophisticated state-aligned cyber intrusions.
Source: www.aljazeera.com