加拿大多伦多大学Citizen Lab研究机构与Confiant安全研究人员联合发现，以色列广告公司Discover-Tech通过其Controlium平台在数百万在线广告中植入零点击恶意软件12。这是研究人员首次获得技术证据证明在线广告可被用于精准识别和自动攻击目标1。
Discover-Tech的平台允许客户进行大规模用户分析和去匿名化处理，随后秘密植入第三方恶意软件1。该恶意软件无需用户点击或交互即可在数秒内自动感染目标设备1。自2024年以来，全球数百万用户已被该公司的广告投放所影响，受害者分布在也门、巴西、墨西哥、捷克等多个国家1。
这些恶意广告还被投放到欧美政府机构网络、联合国、北约、国际刑事法院和国际原子能机构的用户设备上1。卡塔尔半岛电视台等全球多个政府、国际组织和企业的设备遭到感染12。全球数十个政府官员、记者、商人、活动人士、学者和大使馆工作人员成为目标1。
恶意软件可访问目标设备上的所有内容，包括提取信息、照片和邮件，记录通话和秘密激活麦克风1。Citizen Lab研究员Wolfie Christl指出，"主要广告供应商和组织多年未能检测或阻止该公司的恶意广告操作"1。
Researchers at Toronto's Citizen Lab have uncovered evidence that Israeli advertising company Discover-Tech is using its Controlium platform to embed zero-click spyware into millions of online advertisements worldwide.12 The malware installs automatically on target devices within seconds without requiring any user interaction or clicks.1
The campaign has affected numerous high-profile targets since 2024, including Al Jazeera, as well as users in Yemen, Brazil, Mexico, and the Czech Republic.1 Discover-Tech's poisoned ads have also reached users at Western government agencies, the United Nations, NATO, the International Criminal Court, and the International Atomic Energy Agency.1 Once installed, the malware gains access to all content on infected devices, enabling attackers to extract files, photographs, emails, record calls, and secretly activate microphones.1 The operation has reportedly targeted dozens of government officials, journalists, businesspeople, activists, scholars, and embassy staff globally.1
Discover-Tech's platform allows clients to conduct large-scale user analytics and de-anonymization before secretly injecting third-party malware into advertisements.1 According to Citizen Lab researcher Bill Marczak, "This is the first time we have concrete technical evidence showing how online ads can be weaponized to precisely identify and automatically attack targets."1 Co-researcher Wolfie Christl added that "major ad suppliers and organizations have failed for years to detect or stop this company's malicious ad operations."1 Confiant's security team collaborated with Citizen Lab on the investigation, which represents the first documented instance of zero-click attacks distributed through targeted advertising.2
评论
还没有评论，欢迎留下第一条。