Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.
The short version
- Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices of targeted individuals when they did nothing other than load a website or open an installed app.
- “This investigation should … serve as a clear warning signal to news organizations around the world that they may be being actively targeted via this new threat,” Citizen Lab researchers wrote.
- The Israeli firm also used European General Data Protection Regulation (GDPR) consent frameworks to target users within the European Union.
What happened
Discover-Tech has served ads through major networks such as Google, Yandex, and Beeswax. Google and IAB Europe have since removed Discover-Tech from their ad vendor registries, and Google further terminated Discover-Tech’s access to its ad exchange platforms.
Why it matters
Beeswax has removed Discover-Tech from its ad buying platform.
Summary by Nerd News Network. Read the full article at Ars Technica via the links above and below.