Israeli Spyware Hidden in Ads Poses New Threat to Global Security
A malware attack linked to an Israeli technology company has raised serious new concerns about cybersecurity. Cybercriminals have developed a technique that can steal sensitive information from devices without users clicking a link or downloading a file. Simply refreshing a browser or app may be enough to trigger the attack, according to a recent report by the Canada-based research organisation Citizen Lab.
The report said the attack involved Israeli advertising technology firm Discover-Tech and spyware maker Candiru. Devices belonging to several Al Jazeera journalists and staff members were targeted. Signs of malware-based surveillance were also detected across networks associated with sensitive international institutions, including the US Department of Defense, NATO, the United Nations and the European Union.
How the Zero-Click Malware Works
Traditional malware attacks often rely on phishing links and require users to take action. This new technique does not require any clicks. When a user opens a website or app, an automated advertising auction runs in the background. Malicious code can then be delivered directly to the user’s browser through the advertising system.
According to experts, attackers exploit weaknesses in advertising networks to identify targeted users through their device locations, device IDs and IP addresses. They then deliver malicious advertisements to selected devices. Once a device is infected, the malware can potentially access files, documents, cookies and browser credentials. It may also gain control of the device’s camera and microphone.
Analysts warn that government networks and media organisations in 24 countries are at risk of surveillance. Technology experts have called for stricter rules governing the advertising industry and stronger cybersecurity measures to address the growing global threat.
Source: Al Jazeera
