Discover-Tech used online ads for extensive spy operation, researchers say

Google: Google operates large-scale digital advertising platforms that connect advertisers with publishers worldwide. The company collaborated with researchers on the investigation and removed Discover-Tech from its ad platforms for policy violations. Its systems were among those accessed by the Israeli agency in the reported spying operation. Candiru: Candiru is an Israeli spyware company that develops tools for infiltrating devices and has been blacklisted by the US government since 2021 over alleged misuse against officials and activists. Its spyware was delivered in some cases through Discover-Tech's malicious online advertisements. Researchers confirmed its involvement via ad-based campaigns targeting sensitive networks. Comcast: Comcast runs advertising technology services including its subsidiary Beeswax that facilitate programmatic ad delivery. The firm acted on the findings by removing Discover-Tech from its platform following the reported activity. Its ad tech was part of the network exploited in the surveillance campaign. Dekel Boni: Dekel Boni is the chief executive of Discover-Tech. He was contacted by researchers and media regarding the firm's activities but did not respond to inquiries about the reported ad-based surveillance operations. Jerome Dangu: Jerome Dangu is the cofounder of Confiant, a firm specializing in advertising security and fraud detection. He detailed Discover-Tech's high-volume ad operations and data-sharing practices that extended tracking reach, noting exposure across sensitive networks including government and international organizations. Discover-Tech: Discover-Tech is an Israeli digital advertising agency founded in 2020 that operates a network of online ads across websites and apps. The firm has partnered with major ad platforms to deliver advertisements for everyday products while enabling tracking and data extraction capabilities. In this case, its ad infrastructure provided access to targets for Israeli surveillance firms including Candiru. Wolfie Cristl: Wolfie Cristl is a senior researcher at Citizen Lab focused on digital surveillance and privacy issues. He contributed to the analysis showing how online ads can enable espionage and described the current advertising ecosystem as a systemic security threat for governments and civil society. Industry Response: Major ad platforms and industry associations have begun suspending or removing entities found violating policies after collaborative investigations with security researchers. Surveillance Methods: Online advertising platforms can be exploited to track users, extract data, and deliver spyware even without direct user interaction beyond ad loading. National Security Implications: Advertising-driven data collection is viewed as an emerging national security risk, prompting government agencies to restrict ad tracking on certain devices used in sensitive operations.