An Israeli digital advertising company allegedly helped operate a worldwide cyber-espionage network by using ordinary online advertisements to track internet users and deliver sophisticated spyware, according to investigations published Thursday.

Researchers at the University of Toronto's Citizen Lab and cybersecurity firm Confiant identified Discover-Tech, an Israel-based advertising company, as a key intermediary connecting commercial advertising platforms with surveillance technology providers.

Their findings indicate that Discover-Tech's advertisements appeared across more than 120,000 websites and 75,000 mobile applications, giving its systems extensive access to information about internet users.

How the Alleged Espionage Worked

According to the researchers, the operation exploited automated digital advertising systems that normally allow businesses to target customers based on browsing activity and device information.

The technique, identified as AdFection, enabled surveillance operators to identify and track individuals and, in certain cases, attempt to install spyware without requiring victims to click an advertisement.

Citizen Lab said it confirmed that 45 Windows devices belonging to Al Jazeera were compromised between 2024 and 2025 using spyware associated with Israeli surveillance firm Candiru.

Candiru was placed on a U.S. government trade blacklist in 2021 over concerns about its surveillance products being used against journalists, activists and government officials.

Sensitive International Networks Exposed

Researchers also discovered that Discover-Tech advertisements had appeared on networks associated with sensitive organizations, including NATO, the United Nations, the Pentagon and the International Criminal Court.

However, the appearance of advertisements on these networks does not establish that their systems were successfully hacked.

The investigation raises questions about how commercial advertising infrastructure can be exploited for intelligence collection and targeted cyber operations.

Following the disclosures, Google removed Discover-Tech from its advertising platforms, while other advertising industry organizations suspended or terminated their relationships with the company.

Reuters reported that Discover-Tech and representatives of Candiru did not respond to requests for comment.

Why It Matters

The investigation highlights a growing international security concern: digital advertising networks can potentially become tools for surveillance rather than merely commercial marketing.

For journalists, government officials and sensitive institutions, the findings demonstrate how sophisticated spyware operations can exploit technologies encountered during ordinary internet use.

Faultline Brief Assessment: The case illustrates how the boundary between commercial technology and intelligence operations is becoming increasingly blurred. Protecting sensitive communications now requires attention not only to conventional cyberattacks but also to the advertising systems embedded across the internet.