Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Summary
An Israeli advertising technology firm, Discover-Tech, has been identified as a channel for delivering zero-click spyware from Candiru. The firm's advertising infrastructure was used to fingerprint, track, and infect targeted devices at scale.
IFF Assessment
FOE
This article reveals a sophisticated method used to deliver spyware, posing a direct threat to user privacy and security.
Defender Context
This incident highlights the evolving methods threat actors use to deliver malware, leveraging seemingly legitimate infrastructure like advertising networks. Defenders should be aware of the potential for supply chain attacks through third-party services and maintain robust endpoint detection and response capabilities to identify and mitigate novel delivery vectors.