BBlogFlow

Online ads weaponised to deliver ‘zero-click’ spyware, researchers say | Hacking - The Guardian

·3d ago
Source: The Guardian
Read the original article

This story deserves to be shared

Send it to someone who'd care, or post it on your networks.

Facebook Twitter Email

An Israeli advertising agency has been serving millions of online adverts that allow “zero-click” spyware to be used against targets, researchers at a Canadian university have said. Citizen Lab, a digital investigations research unit at the University of Toronto, said it believed dozens of devices at the Qatari broadcaster Al Jazeera had been compromised by spyware delivered through ads run by Discover-Tech, which describes itself as a specialised digital advertising agency. According to Citizen Lab, Discover-Tech operates a software platform called Controlium that allows its clients to “mass-profile and deanonymise” internet users then covertly hack targets with third-party spyware. Unlike infections that rely on people interacting with links or files, the spyware requires no interaction from the victim to be installed, making it a new delivery technique, Citizen Lab says. The infections happen without a user’s knowledge, and in a matter of seconds, according to Citizen Lab. “[The online advertising] ecosystem is being weaponised at a massive scale to profile millions of users, then silently infect targets with zero-click mercenary spyware,” the report says.

This article is an excerpt. To read the full content, visit the original source. The Guardian

Reactions

0 comments

No comments yet. Be the first to share your thoughts!

Facebook Twitter

Related articles

Israeli ad-tech firm helped place spyware on Al Jazeera devices - Al Jazeera

Citizen Lab investigation says dozens of Al Jazeera devices were infected by malware planted through advertisements. Israeli advertising technology company Discover-Tech helped place spyware on dozens of devices used by Al Jazeera and other companies. Al Jazeera Media Network on Thursday said it “condemns the spyware attacks targeting a number of its staff” and pledged to continue to “protect its employees and systems”. The network said targeting journalists is an “assault on press freedom” and called for those responsible to be held accountable. A Citizen Lab investigation, prompted by Al Jazeera’s initial internal probe into the issue, has confirmed that spyware from Candiru, an Israeli spyware firm blacklisted by the United States government in 2021 for its malicious cyber activities, was planted on these devices, using the first-known instance of “zero-click” targeted advertising. The nature of installing this spyware means that once an infected advertisement appears on a device, that device, too, is infected – spying on, and feeding, all the data and information available on that platform to those stealing it.

Al Jazeera·

OpenAI ‘reviewing’ report of failed hacking attempt against Canada’s gov’t - Al Jazeera

AI giant says it is reviewing report of attempted cyberattack on Canada’s national archives agency. OpenAI has confirmed that it is reviewing a report of a failed hacking attempt against a Canadian government body in the latest incident to highlight cybersecurity concerns about artificial intelligence. The AI giant said on Wednesday that it was reviewing the alleged cyberattack against Canada’s national archives agency and had provided an initial briefing to Canadian officials. Recommended Stories list of 4 itemslist 1 of 4Execution of US woman Christa Pike fails after botched lethal injectionlist 2 of 4‘Catastrophic year’ as Swiss glaciers lose 5% of ice after heatwaveslist 3 of 4Gaza prepares to bury 105 Palestinians killed in October 2023list 4 of 4Mourners bury DR Congo official killed after defending Ebola responseend of list“Our priority is to provide affected organisations with accurate, useful information, and we’ll keep refining our approach as we learn more,” a spokesperson for the San Francisco-based company said in a statement to Al Jazeera.

Al Jazeera·