Israeli Ad-Tech Firm Accused of Spyware Campaign Targeting Dozens of Al Jazeera Devices

DOHA: An Israeli digital advertising company has allegedly exploited online advertisements to conduct surveillance and deliver spyware to targeted devices, including at least 45 computers belonging to Qatar-based Al Jazeera Media Network, according to a new investigation by Citizen Lab, a cybersecurity research group at the University of Toronto.

The investigation found that during 2024 and 2025, at least 45 Al Jazeera computers were infected with spyware developed by Israeli surveillance firm Candiru. Researchers linked the operation to an Israeli advertising company identified as Discover Tech, which allegedly used online advertising infrastructure to facilitate surveillance and spyware delivery.

According to the findings, the operation employed an advanced technique known as a zero-click attack, which can compromise a targeted device without requiring the user to click on a link, download a file or interact with a suspicious advertisement.

Under this method, the appearance of a specially crafted advertisement on a website or within an application may be sufficient to initiate an attack against a targeted device.

Spyware Capable of Accessing Sensitive Information

Cybersecurity experts say spyware of this nature can potentially access sensitive information stored on infected computers, including files, documents, emails, messages and passwords.

Depending on the spyware’s capabilities and the level of access obtained, it may also capture screenshots, record keystrokes and collect information through a device’s microphone or webcam.

The investigation found that Discover Tech’s advertisements had reached more than 120,000 websites and 75,000 mobile applications worldwide.

Researchers warned that the advertising infrastructure could potentially enable the identification and surveillance of large numbers of users. However, they stressed that exposure to the company’s advertisements did not establish that every viewer’s device had been infected with spyware.

Al Jazeera’s technical team first noticed unusual activity on some journalists’ computers in 2024. The network subsequently contacted Citizen Lab to investigate the suspicious activity and determine its source.

A detailed technical analysis reportedly established a connection between the spyware and the advertising system used in the operation.

Al Jazeera Condemns Targeting of Journalists

Al Jazeera Media Network strongly condemned the alleged targeting of its employees, describing the surveillance as an attack on press freedom.

The network said monitoring journalists posed risks not only to their personal security but also to the public’s right to access information. It called for action against those responsible.

The findings also indicated that advertisements associated with the Israeli company had appeared on networks linked to the US Department of Defense, the International Atomic Energy Agency and the International Criminal Court.

However, the investigation did not confirm that computers belonging to these institutions had been infected with spyware.

Google Removes Company From Advertising Services

Israeli surveillance company Candiru was placed on the US government’s Entity List in 2021 over concerns related to cyber-surveillance activities. Its spyware has previously been linked in allegations to the monitoring of journalists, human rights activists and other individuals.

Following the latest revelations, Google reportedly removed Discover Tech from its advertising services, while other advertising platforms also took action against the company.

The allegations have renewed concerns about the potential misuse of digital advertising systems to conduct covert surveillance on internet users.

Cybersecurity specialists warn that such techniques could pose a serious threat to online privacy and digital security because targeted devices may be compromised without users knowingly clicking on suspicious links or downloading malicious files.

The investigation highlights growing concerns about the use of commercial advertising infrastructure to deliver surveillance technology and the challenges involved in protecting journalists and other potential targets from sophisticated cyberattacks.