The campaign is the first confirmed instance in the wild of zero-click infections delivered via standard online ads, which infect targets as soon as a page loads without requiring user interaction. Discover-Tech utilized an advertising network reaching nearly 200,000 websites and apps, and Citizen Lab traced the activity using billions of bidding records and company source code obtained after the firm made operational security mistakes.
Tuesday, October 20, 2026
Story
Israeli Firm Targets NATO with First Confirmed Zero Click Ad Spyware
Cybersecurity6 days ago
The European Parliament and nuclear giant Westinghouse were among several high-value targets of a mercenary hacking operation known as AdFection. Researchers at Citizen Lab identified Candiru spyware infections on more than 45 devices at Al Jazeera and found that an ad pipeline managed by Discover-Tech reached into the networks of NATO, the US Department of Defense, the IAEA and the ICC.
Looking for more context or analysis?
Tilt chat provides reliable, tailored insights, alerts, and automations.