Cam Wilson @camwilson@mastodon.social:

Research group, The Citizen Lab, said it found proof that an Israel-based company exploited digital advertising technology to install back doors onto devices, merely by the victim viewing an advertisement on a website or in an app.

This exploit — called ''zero-click mercenary spyware" — allowed bad actors to run code on devices that installed software that acted as a back door to the device, allowing them to access things like passwords, emails and details of internal systems.

The Citizen Lab claims that a company, Discover-Tech, acted as the go-between for online advertising platforms like Google and spyware and hacking companies. At least one of those, Candiru, has been placed under US export controls because of its "malicious cyber activities".