Pluralistic: Israeli ad-tech company was a delivery system for "mercenary spyware" (17 Oct 2026)

Blog · Watch/Read · (gathered 2026-10-18)

• The ad-tech industry, including major platforms like Google and Facebook, has become a dangerously insecure delivery system for “mercenary spyware,” enabling “zero-click malware” attacks on targeted individuals.
• Citizen Lab’s “Exposing AdFection” report reveals how Israeli ad-tech company Discover-Tech, despite industry certifications, exploited programmatic ad systems and user surveillance dossiers to serve “no-click, zero-day” attacks from groups like Candiru and NSO Group, compromising devices without user interaction.
• This monumental insecurity, driven by surveillance-based advertising, exposes every internet user to targeted attacks; the only practical defense is to block all programmatic ads, rejecting “pay or okay” schemes and advocating for a ban on surveillance advertising in favor of context-based ads.