Researchers from Citizen Lab have raised alarms about a new form of zero-click spyware that can infect mobile devices through targeted advertisements. This spyware, linked to the advertising platform Controlium operated by Discover-Tech, reportedly allows users to “de-anonymize, fingerprint, and automatically infect devices” simply by displaying an ad. The implications of this discovery are significant, as millions of devices may have been exposed to potential profiling and infection.
Between March and June of this year, Citizen Lab analyzed ad-bidding records that were publicly accessible on Discover-Tech’s website. They found that ads associated with the firm appeared in over 70,000 mobile applications and more than 120,000 websites. Notably, some of these ads were shown over a million times, raising concerns about the scale of exposure.
Potential Targets and Scope of Infection
While not all ads from Discover-Tech were weaponized, the researchers noted that the ads were visible on networks linked to government and national security entities worldwide. This includes organizations such as NATO and the United Nations, as well as critical infrastructure providers in Australia and various government agencies in Norway and Sweden. The widespread presence of these ads suggests a troubling vulnerability within trusted digital ad ecosystems.
Challenges in Detection and Reporting
Previous instances of zero-click spyware distributed via ads have rarely been reported, which Citizen Lab attributes to the extensive trust placed in ad infrastructure without adequate oversight. “The network logs from Al Jazeera were key in understanding the ad-based nature of that attack,” said Citizen Lab researcher Marczak. He emphasized that if a user’s device is targeted while connected to home Wi-Fi or mobile data, the lack of robust network monitoring could hinder detection.
Jason Kint, CEO of Digital Content Next, echoed these concerns, stating that while such attacks are rare and sophisticated, they are plausible and damaging. “Anything that goes directly against users’ expectations or lowers the trust in the open web is deeply concerning,” he remarked.
This emerging threat underscores the need for heightened vigilance and scrutiny within the digital advertising ecosystem, as the potential for exploitation through seemingly innocuous ads poses a significant risk to users worldwide.
For further insights into the implications of this spyware, see the full report by Wired.
