# Citizen Lab investigation links Discover-Tech to spyware delivery through ads

_Published Saturday, October 17, 2026 at 1:06 PM EDT · Security, Products · Latest · Tier 2 — Notable_

Discover-Tech used advertising infrastructure to locate targeted people and deliver spyware without requiring them to click, according to a Citizen Lab investigation described by Pluralistic. Targets included computers used by Al Jazeera workers, which were attacked with Candiru malware.

The account says Discover-Tech used persistent advertising identifiers to find targets and served malicious ads exploiting previously unknown vulnerabilities. Loading a page or opening an app carrying those ads could trigger a device compromise. Discover-Tech held supplier certifications from Google, Yandex, Microsoft, Beeswax and IAB, giving it access to more than four billion ad auctions. The reported attacks targeted selected users rather than every person exposed to those advertising networks.

## Sources

- [pluralistic.net](https://pluralistic.net/2026/10/17/mercenary-spyware/#discover-tech)

---
Canonical: https://techandbusiness.org/newswire/72KDS3iacjEsCcPcuVq1Mt
Published: 2026-10-17T17:06:29.618Z
Story chronology: 2026-10-17T15:17:32.000Z
Retrieved: 2026-10-17T20:23:38.008Z
Publisher: Tech & Business (techandbusiness.org)