The real research: https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

Here is the boiled down points from this

1. you open a page that has an ad served from Discovery-Tech ad inventory

2. the ad has a standard script in to that calls back to the home server and passes your advertising ID (cookie ID on desktop or mobile ID on mobile) plus your IP

3. there is a third party that has compiled a list of ad ID + IP that effectively de-anonymizes users. This is used to target specific people. The info passed by the ad is compared against the target list. If there is no match to the target nothing further happens.

4. if a match is found it returns javascript that runs on the page. It finger prints the device then it checks for an exploit.

5. if the exploit it is looking for is found the exploit corrupts memory in the rendering engine, achieves native code execution, escapes the sandbox, and installs the spyware.

And, yes, ad blocker software would stop this. If the ad cannot render it cannot call back to the mothership. The only exception to this would be if the ad was served first party, like the website you were visiting was also hosting the ad. Or if you are on a device using a browser that is part of a app that does not have ad blocking, like the built in browser for instagram.

Here is what they did not say

We don't know which browser, OS, or application vulnerability was used at Al Jazeera. It could be a unknown zero day one or a one that is known but only works on certain older versions of software.

Adding in a standard YSK how to delete your advertising ID from your mobile device.

Once again proving that my PiHole is an essential security component on my network instead of just something that blocks annoying ads.

These articles suck, in that they want me to disable my ad blocker to read an article about how ads can now do malicious stuff by just being viewed. Then there is no info as to what it’s doing or how it’s doing whatever malicious things it claims, let alone the OS this affects.

Remember when pop ads could open a new window on your browser?

Zionists are the common enemy of humanity.

How can I block Israel as a whole?

According to the report, Controlium is able to harvest a user’s identity and IP address when the user is shown a seemingly benign custom-created ad – for example, for a digital game or a telecoms service. If the user has been selected as a target for hacking, a mercenary spyware firm can then send a malicious code containing spyware to their device, the researchers say.

They say that millions of users worldwide have been served ads by Discover-Tech since 2024, including in Yemen, Brazil, Mexico and Czechia.

Related work by the research group Confiant also suggests that Discover-Tech’s ads have been shown to users of the networks of government entities in Europe and the US, as well as the UN, Nato, the international criminal court and the International Atomic Energy Agency.

“It’s disastrous that major ad vendors and organisations apparently were neither able to detect nor prevent the company’s malicious advertising operations for years,” said Wolfie Christl, a researcher at Citizen Lab. “The way the online advertising ecosystem works today is a security threat for states, the private sector, civil society and everyone else alike.”

It doesn’t explicitly say how it works, though I imagine it’s just looking for vulnerable os & user-agents

Ad blocking is network security.

Friendly reminder to BLOCK ALL ADVERTISEMENTS!

They are a legitimate cybersecurity threat (not to mention all the scams).

Install uBlock Origin in Firefox, ditch Chrome entirely, use adblocking DNS, and consider setting up a PiHole at home or using AdNauseum.

why is this terrorist nation still allowed to be a fucking nation? i mean i know it’s because a lot of people profit from them but sheesh…

Is there some way for us to block ads at network-level on networks we don't control? Something that allowed us to connect to public wifis or work networks and prevent ads from loading, therefore messing with the digital economy if we did this on a large scale?

Edit: I didn't explain my thoughts very well. I mean blocking ads for other people around me. I know that's probably not even legal, but would be awesome, if possible

They say that millions of users worldwide have been served ads by Discover-Tech since 2024, including in Yemen, Brazil, Mexico and Czechia.

You can bet Westerners are included.

Through cookie sharing agreements they touched hundreds of millions of computers it's thought.

From the comments:

schleck8 37 minutes ago | prev | next [–]

This is even crazier than the last time Citizen Lab found an Israeli zero-click spyware (Pegasus). You could call it a sequel reply

icantevenhold 8 minutes ago | parent | next [–]

Don't call it a comeback, I been here for years Rocking my peers and putting suckas in fear

https://citizenlab.ca/research/how-discover-tech-turned-targeted-ads-into-a-pipeline-for-spyware/

Here's the full blog post.

They didn't mention much about the attack chain itself, but they did mention it was capable of targeting both android/iOS and windows.

It would be more useful to know what vulnerabilities are being exploited here. The fact that the possibility to hack people is used if it exists is not surprising. Even if these people didn’t do it, others might, which is why this shouldn’t be possible in the first place.

ad-blockers are security tools

Israel

From the comments:

schleck8 37 minutes ago | prev | next [–]

This is even crazier than the last time Citizen Lab found an Israeli zero-click spyware (Pegasus). You could call it a sequel reply

icantevenhold 8 minutes ago | parent | next [–]

Don't call it a comeback, I been here for years Rocking my peers and putting suckas in fear