CITIZEN LAB SAYS GOVERNMENTS ARE ABUSING ONLINE ADS TO HACK PEOPLE WITH ‘ZERO-CLICK' SPYWARE

Summary from the TLDR InfoSec newsletter

Citizen Lab reports that Israeli firm Discover-Tech's ad platform, Controlium, let spyware vendors Candiru and Bindecy target people through online ads. At least 45 Al Jazeera Windows computers were infected with Candiru spyware in 2024–2025. Exposed source code, login records, and billions of bidding records showed ads reached government, military, and critical-infrastructure devices.