Researchers have identified the first publicly documented case of spyware installed through web advertisements without any user interaction. The operation is attributed to Discover-Tech, an Israeli company whose platform Controlium collects user identities and IP addresses by displaying seemingly harmless ads.
For users selected as targets, the spyware can exploit devices with malicious code capable of extracting data, recording calls, and activating microphones. Since 2024, millions of users have been exposed to Discover-Tech ads, including those in Brazil. The targets reportedly include government officials, journalists, businesspeople, activists, academics, and embassy staff.