Israeli ad firm Discover‑Tech used online ads to conduct large‑scale spying operation

An Israeli digital advertising agency known as Discover-Tech has been identified as the operator of a large-scale surveillance network that utilized online advertisements to track internet users and facilitate the hacking of devices. According to findings released by researchers on October 15, the firm’s infrastructure allowed various surveillance companies, including the U.S.-blacklisted spyware firm Candiru, to gain access to major advertising platforms operated by entities such as Google, Comcast, and Yandex.

The operation functioned by embedding malicious code within standard digital advertisements, which often promoted common consumer goods like smartphones or audio equipment. These advertisements were distributed across a vast network comprising more than 120,000 websites and 75,000 mobile applications. The researchers noted that the spying process was triggered automatically as soon as an advertisement loaded on a user’s device, requiring no further interaction from the victim.

Once the ads were active, Discover-Tech was able to identify and track individuals as they navigated the internet. In some instances, the firm’s systems attempted to extract sensitive information, such as the phone numbers of smartphone users, to assist in broader espionage efforts. This method highlights the potential for the online advertising ecosystem to be repurposed as a channel for sophisticated surveillance campaigns.

The research underscores significant concerns regarding the security architecture of the modern digital advertising industry. Experts involved in the investigation characterized the current functioning of online advertising as a systemic security threat that affects a wide range of actors, including private citizens, civil society organizations, and state entities. By leveraging the reach of global advertising networks, the firm was able to maintain a sprawling presence that bypassed traditional security oversight.