Photo via Times of India

Israeli firm used online ads to run vast spy operation, researchers say

Read the original at Times of India ↗
Cite

Reuters. (2026, October 16). Israeli firm used online ads to run vast spy operation, researchers say. Times of India. https://timesofindia.indiatimes.com/world/middle-east/israeli-firm-used-online-ads-to-run-vast-spy-operation-researchers-say/articleshow/134980080.cms

Dated from the outlet's own feed. Check the original for its byline.

Times of India · collected 2026-10-16 · by Reuters

Quick Summary

Researchers from Citizen Lab and Confiant claim that Israeli digital advertising agency Discover-Tech used a network of online ads to track and potentially hack internet users through platforms like Google and Comcast. The campaign involved over 120,000 websites and 75,000 apps, with malicious ads reaching an estimated 10 million daily worldwide. The researchers found evidence that the ads compromised devices in organizations such as Al Jazeera and penetrated networks related to global institutions and chip companies.
Written by AI on 2026-10-16, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

DiscoverTech, an Israeli ad company, helped place spyware on over 45 devices belonging to Al Jazeera, according to a report published by Citizen Lab and the U.S.-based cybersecurity firm Confiant. The spyware was delivered through ads that did not require users to click or download anything, marking the first known instance of "zero-click" targeted advertising. Candiru, an Israeli spyware company blacklisted by the U.S., provided the malicious software used in these attacks. Al Jazeera condemned the targeting as a direct assault on press freedom and journalists' security. The report also found that DiscoverTech's ads appeared on over 120,000 websites and 75,000 apps, potentially exposing national-security-sensitive networks like NATO and the United Nations to similar risks.

Written for “Israeli Firm Spied On Al Jazeera” on 2026-10-31, grounded in this article and the 6 other(s) covering the same event.

Story

📰 Israeli Firm Spied On Al Jazeera
Politics · 7 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 9% of its claims. Each row says how that neighbour differs.
CBC News
⚖️ Leans left Hedges 7 of 34 claims Outlet record 60/100
NBC News
⚖️ Leans left Hedges 2 of 39 claims Outlet record 60/100
Al Jazeera
⚖️ Leans left Hedges 0 of 15 claims Outlet record 60/100
Al Jazeera
⚖️ Leans left Hedges 0 of 4 claims Outlet record 60/100
Al Jazeera
⚖️ Leans left Hedges 2 of 46 claims Outlet record 60/100
“The articles describe related activities by an Israeli firm but focus on different aspects and outcomes.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
22
sentences that state something as happening or true
Uncertain
9%
2 of 22 hedged ("reportedly", "may", "according to")
Leaning
withheld
no quote in the article backed the model's score
Publisher signals
59/100
Times of India's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
7
Politics
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-16 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

Times of India · 3776 article(s) · 2 correction(s) detected
Running correction rate · 2 correction(s)

Who wrote this

Reuters
793 article(s) here · 1 carrying a prediction
🔮 Published Oct. 31, 2026, 2:20 a.m. ET The US State Department said on Friday it had approved the sale of 500 Patriot PAC-3 missiles to Ukraine for an estimated $2.1 billion, in what would be one of the most significant steps to supply defensive weapons to Kyiv since the start of the second Trump administration. Zelensky said on Monday that Ukraine had been waiting for almost a month for the US to sign off on critical missile supplies, as Russia stepped up attacks on energy and civilian infrastructure.
🔮 More than 160,000 people across Germany are expected to join demonstrations on Saturday, organisers say, as a youth-led movement inspired by protests elsewhere in Europe takes to the streets to demand better education and lower living costs.
🔮 “Why would the Field Marshal be going twice if it is not for some positivity?
🔮 “Why would the Field Marshal be going twice if it is not for some positivity?
🔮 Meta had settled with S.J. days before the trial, so Friday’s settlement with K.D.B. means the trial is expected to proceed against Snap only.
🔮 “My duty now is not to focus on discussing whether I will remain in office, but on solving the problem, determining exactly what happened and providing clear explanations,” Puente said at a press conference on Friday.
🔮 The global crypto insurance market was valued at $9.37bn in 2025 and is projected to reach $184.98 billion by 2033, according to Data Bridge Market Research.
2026-10-30 · mixed framing · Binance's $6.3bn hack: How crypto insurance works
🔮 No further victims were expected to be found, regional authorities said.
🔮 “This was a complex attack, and we are doing all we can in coordination with law enforcement to resolve it,” Binance wrote on X. The firm earlier posted a series of sometimes contradictory messages, insisting that “user funds are completely safe” but also saying it would “cover all losses.
🔮 Now in Year 2 of the revamped format, the league will hold its first-ever Game 7 with a first-time champion awaiting on either side.
Wire or desk byline, not an individual reporter.
Also by Reuters
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 793 articles by Reuters →

Topics

Candiru Citizen Lab Confiant Discover-Tech Israeli

Subjects

Discover-Tech ORG · 8× Candiru ORG · 4× Citizen Lab ORG · 4× Confiant ORG · 3× Comcast ORG · 2× Dangu PERSON · 2× Discover-Tech's ORG · 2× Google ORG · 2× Israeli NORP · 2× Yandex ORG · 2×

Narrative

Israeli digital advertising agency Discover-Tech used a sprawling network of online ads to identify and track internet users and help hack their devices, Canadian cyber watchdog Citizen Lab and New York advertising security firm Confiant said on Thursday.
framing: assertive · carried by 1 article(s) · first seen 2026-10-16
🔮 The reports said the online advertising industry, already under scrutiny over privacy, could serve as a channel for extensive espionage.
2026-10-16 · Times of India
Israeli firm used online ads to run vast spy operation, researchers say · assertive framing

Claims (22 extracted, 2 hedged)

Israeli digital advertising agency Discover-Tech used a sprawling network of online ads to identify and track internet users and help hack their devices, Canadian cyber watchdog Citizen Lab and New York advertising security firm Confiant said on Thursday. asserted
Lab → use → Thursday
Its services gave Israeli spyware firm Candiru and other surveillance companies access to ad platforms run by Google, Comcast, Yandex and others. asserted
services → give → Google
The reports said the online advertising industry, already under scrutiny over privacy, could serve as a channel for extensive espionage. uncertain
industry → say → espionage
Discover-Tech's ads, often promoting ordinary products such as phones or earpods, reached more than 120,000 websites and 75,000 apps through its partnerships, Citizen Lab said. asserted
Lab → promote → partnerships
Users visiting sites or using apps carrying the malicious ads could be identified and tracked by Discover-Tech, which sometimes tried to extract phone numbers from smartphone users, researchers said. uncertain
researchers → visit → users
The ads only had to load for the surveillance to occur. asserted
surveillance → have → ?
Some also helped install Candiru spyware on devices, although Confiant said these made up a tiny fraction of Discover-Tech's volume. asserted
these → help → volume
Confiant co-founder Jerome Dangu said Discover-Tech distributed at least 10 million ads daily worldwide and used data-sharing arrangements known as cookie matching to track people beyond their reach. asserted
Tech → say → reach
"Very likely hundreds of millions of people would have been touched by Discover-Tech," Dangu said. asserted
Dangu → touch → Tech
Discover-Tech, founded in 2020, did not respond to messages, while attempts to reach chief executive Dekel Boni and Candiru's owners were unsuccessful. asserted
attempts → found → Boni
US commerce department blacklisted Candiru in 2021, alleging it supplied spyware used to maliciously target govt officials, journalists, activists and academics. asserted
it → blacklist → officials
Citizen Lab said Candiru spyware delivered through Discover-Tech ads compromised 45 Windows devices at Qatari broadcaster Al Jazeera between 2024 and 2025. asserted
spyware → say → 2024
It said it confirmed the attacks using network logs shared by the broadcaster. asserted
it → say → broadcaster
Al Jazeera did not respond. asserted
Jazeera → respond → ?
Dangu said malicious ads appeared on hundreds of networks in sensitive categories, including Pentagon, International Atomic Energy Agency and International Criminal Court. asserted
ads → say → Pentagon
He said Palestinian territories were particularly saturated, adding: "You go to almost any site in Palestine - any site - you find a Discover-Tech ad. asserted
you → say → ad
It gives them a very complete visibility on the digital activities of an entire country," he said. asserted
he → give → country
Citizen Lab said it had similar evidence that the ads were shown to people in UN, Nato, European Commission and more than a dozen national govts. asserted
ads → say → UN
They also appeared on networks of chip companies including Nvidia, Sandisk, Broadcom and Micron, and unidentified media organisations in Mexico, Israel and Europe. asserted
They → appear → Mexico
Google said it had worked with both investigators and removed Discover-Tech from its ad platforms "for systematically violating our policies." asserted
it → say → policies
IAB Europe suspended it from its approved-vendor list after an audit, while Comcast subsidiary Beeswax removed it from its platform. asserted
Beeswax → suspend → platform
Yandex did not respond. asserted
Yandex → respond → ?
💬Give feedback
🕘History 🎫Support