Ordinary Online Ads Can Silently Plant Spyware on Devices, Researchers Warn

A routine online advertisement promoting a mobile game or telecoms service can now unmask a web user and silently infect their device with commercial spyware in seconds—without requiring a single click. According to findings published by Citizen Lab, a digital investigations unit at the University of Toronto, an Israeli advertising firm called Discover-Tech has weaponized standard digital ad networks to facilitate surreptitious surveillance against selected individuals.

without requiring a single click= Highlights a 'zero-click' exploit, where malware infects a target without needing any user interaction or approval.facilitate surreptitious surveillance against= A formal collocation meaning to make secret monitoring or spying easier against a target.

The researchers revealed that Discover-Tech operates a platform known as Controlium, which allows clients to mass-profile and deanonymize internet traffic. When a targeted user encounters a seemingly benign advertisement, the platform harvests their identity and IP address, enabling partnered mercenary spyware vendors to deliver malicious payloads directly to the hardware. Citizen Lab reported that dozens of devices belonging to staff at Qatari broadcaster Al Jazeera were compromised using this technique, which allows third-party spyware to extract messages, record phone calls, and secretly activate microphones.

mass-profile and deanonymize= Technical jargon describing the process of gathering bulk behavioral data on many users to reveal their real identities.enabling partnered mercenary spyware vendors to deliver= Uses 'enabling [object] to [verb]' to describe how ad tracking directly facilitates weapon deployment by commercial hacking contractors.

The scope of the operation extends far beyond individual newsrooms. Since 2024, millions of Discover-Tech’s advertisements have circulated globally, reaching users in countries including Brazil, Mexico, Yemen, and Czechia. Complementary research by cybersecurity group Confiant revealed that these ads also surfaced on internal networks utilized by the United Nations, NATO, the International Criminal Court, and various government agencies across Europe and the United States.

extends far beyond= A discourse marker used to indicate that the reach or impact of an activity is much wider than the specific examples already mentioned.Complementary research by= Journalistic framing introducing an independent second source whose findings reinforce or expand upon the primary investigation.

The revelation provides the first concrete technical proof that the automated, split-second ad auctions underpinning the modern internet have been harnessed for targeted espionage. Describing the opaque ad-tech ecosystem as a systemic security threat to civil society and governments alike, Citizen Lab researchers urged international regulators and cybersecurity agencies to urgently step in and address the structural risks that permit advertising infrastructure to be repurposed for state-level surveillance.

split-second ad auctions underpinning= Combines a compound modifier for extreme speed with a participle meaning supporting or serving as the foundation of modern web systems.urgently step in and address= A dynamic verbal collocation calling for immediate, decisive intervention by regulatory bodies.

Word	Meaning
weaponized	make into or use as a weapon or a potential weapon
surreptitious	marked by quiet and caution and secrecy; taking pains to avoid being observed
benign	not dangerous to health; not recurrent or progressive (especially of a tumor)
underpinning	support from beneath
espionage	the systematic use of spies to get military or political secrets
opaque	not transmitting or reflecting light or radiant energy; impenetrable to sight

Ordinary Online Ads Can Silently Plant Spyware on Devices, Researchers Warn

Learning Notes

Grammar Patterns

Vocabulary

Language Insights

Practice

Pattern	Meaning
without requiring a single click	Highlights a 'zero-click' exploit, where malware infects a target without needing any user interaction or approval.
facilitate surreptitious surveillance against	A formal collocation meaning to make secret monitoring or spying easier against a target.
mass-profile and deanonymize	Technical jargon describing the process of gathering bulk behavioral data on many users to reveal their real identities.
enabling partnered mercenary spyware vendors to deliver	Uses 'enabling [object] to [verb]' to describe how ad tracking directly facilitates weapon deployment by commercial hacking contractors.
extends far beyond	A discourse marker used to indicate that the reach or impact of an activity is much wider than the specific examples already mentioned.
Complementary research by	Journalistic framing introducing an independent second source whose findings reinforce or expand upon the primary investigation.
split-second ad auctions underpinning	Combines a compound modifier for extreme speed with a participle meaning supporting or serving as the foundation of modern web systems.
urgently step in and address	A dynamic verbal collocation calling for immediate, decisive intervention by regulatory bodies.