Spyware Hides in Ads: Millions Hacked Zero-Click

A sophisticated spyware operation, identified by researchers, is leveraging the online advertising ecosystem to infect millions of devices without user interaction. The platform, known as Controlium and operated by Discover-Tech, facilitates the mass profiling and deanonymization of internet users. This enables clients to covertly deploy third-party mercenary spyware.

The spyware's zero-click delivery method means infections occur silently and rapidly, posing a significant security threat. Since 2024, this technique has reportedly targeted users across numerous countries, including Yemen, Brazil, Mexico, and Czechia. Investigations also suggest the ads have been shown to users associated with government entities in Europe and the US, as well as international organizations like the UN and NATO.

Citizen Lab researchers highlight that Controlium acts as a crucial facilitator for spyware firms targeting a wide array of individuals, including government officials, journalists, and activists. The spyware can gain complete access to a target's device, extracting sensitive data and monitoring communications. This discovery underscores the pervasive security risks within the current online advertising landscape, prompting calls for urgent regulatory intervention.