根据Citizen Lab的调查报告，以色列广告技术公司Discover-Tech被曝光充当雇佣间谍软件的传播系统 1。该公司通过谷歌、Facebook等主要广告平台向目标用户投放包含零点击恶意代码的"恶意广告"，这些攻击无需用户交互即可感染设备 1。Al Jazeera员工的计算机成为了攻击目标 1。
Discover-Tech获得了谷歌、微软、Yandex、Beeswax和IAB等多家企业的安全供应商认证 1，凭此能够访问超过40亿次广告竞拍 1。该公司利用"无点击、零日"漏洞进行攻击，使恶意代码可以在完全无需用户操作的情况下执行 1。Discover-Tech与NSO Group等以色列网络公司存在关系，其董事会成员包括Eric Banoun 1。该公司甚至投放伪造的GDPR通知作为恶意广告 1。
An investigation by Citizen Lab has revealed that Discover-Tech, an Israeli advertising technology firm, functioned as a delivery mechanism for mercenary spyware operations 1. The company leveraged its access to major advertising platforms, including Google and Facebook, to distribute malicious advertisements containing zero-click exploits that could infect devices without any user interaction 1.
Discover-Tech held security certifications from Google, Yandex, Microsoft, Beeswax, and the IAB, granting it access to over 4 billion ad auctions 1. This privileged position enabled the firm to target specific individuals, with documented attacks against Al Jazeera employees' computers 1. The malicious advertisements exploited zero-day vulnerabilities and required no user action to compromise targeted systems 1. In addition to sophisticated technical attacks, the company deployed fraudulent GDPR notifications as part of its advertising campaigns 1.
The investigation identified connections between Discover-Tech and other Israeli cyber companies, including NSO Group, with board member Eric Banoun serving as a link between these entities 1.
评论
还没有评论，欢迎留下第一条。