{
    "archive_path": "archive/1792102013.774076",
    "base_url": "www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows",
    "basename": "",
    "bookmarked_date": "2026-10-15 22:06",
    "canonical": {
        "archive_org_path": "https://web.archive.org/web/www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows",
        "dom_path": "output.html",
        "favicon_path": "favicon.ico",
        "git_path": "git/",
        "google_favicon_path": "https://www.google.com/s2/favicons?domain=www.middleeastmonitor.com",
        "headers_path": "headers.json",
        "htmltotext_path": "htmltotext.txt",
        "index_path": "index.html",
        "media_path": "media/",
        "mercury_path": "mercury/content.html",
        "pdf_path": "output.pdf",
        "readability_path": "readability/content.html",
        "screenshot_path": "screenshot.png",
        "singlefile_path": "singlefile.html",
        "warc_path": "warc/",
        "wget_path": "www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/index.html"
    },
    "domain": "www.middleeastmonitor.com",
    "extension": "",
    "hash": "JJPW96G7EPK1K8VX8TA0",
    "history": {
        "archive_org": [],
        "dom": [],
        "favicon": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--max-time",
                    "120",
                    "--output",
                    "favicon.ico",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://www.google.com/s2/favicons?domain=www.middleeastmonitor.com"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-16T01:25:30.242234+00:00",
                "index_texts": null,
                "output": "favicon.ico",
                "pwd": "/data/archive/1792102013.774076",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-16T01:25:29.634615+00:00",
                "status": "succeeded"
            }
        ],
        "git": [],
        "headers": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--head",
                    "--max-time",
                    "120",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-16T01:25:30.883262+00:00",
                "index_texts": null,
                "output": "headers.json",
                "pwd": "/data/archive/1792102013.774076",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-16T01:25:30.250216+00:00",
                "status": "succeeded"
            }
        ],
        "htmltotext": [],
        "media": [],
        "mercury": [
            {
                "cmd": [
                    "/app/node_modules/@postlight/parser/cli.js",
                    "https://www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/"
                ],
                "cmd_version": "1.0.0",
                "end_ts": "2026-10-16T01:25:48.381825+00:00",
                "index_texts": null,
                "output": "mercury",
                "pwd": "/data/archive/1792102013.774076",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-16T01:25:43.995435+00:00",
                "status": "succeeded"
            }
        ],
        "pdf": [],
        "readability": [
            {
                "cmd": [
                    "/app/node_modules/readability-extractor/readability-extractor",
                    "/tmp/tmp8mqmu_7l",
                    "https://www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/"
                ],
                "cmd_version": "0.0.11",
                "end_ts": "2026-10-16T01:25:43.980996+00:00",
                "index_texts": [
                    "Israeli digital advertising firm Discover-Tech weaponized a vast commercial ad network to harvest personal data and deliver mercenary spyware to targeted devices worldwide, Canadian cyber watchdog Citizen Lab and New York-based ad security firm Confiant reported Thursday, Anadolu reports.\n\u201cThe core finding is the weaponization of ad infrastructure for advanced staging, preliminary targeting, and payload delivery, characterized by exceptional technical sophistication, robust anti-interception measures, and surgical micro-targeting,\u201d Confiant said in its investigative findings.\nThe coordinated operation enabled US-blacklisted Israeli spyware company Candiru, rebranded as Integrity Labs, and surveillance vendor Intelos to exploit commercial ad inventory across major global platforms, including Google, Beeswax and Russia\u2019s Yandex, to track targets and compromise consumer devices.\nCitizen Lab described the campaign as the first public technical confirmation of zero-click mercenary spyware delivered through online advertising, a method researchers termed \u201cAdFection.\u201d\nDevices belonging to staff at international news network Al Jazeera were among those infected through the weaponized ad placements, which operated silently without visible pop-ups or suspicious links.\n\u2013 Global identity graph, data harvesting\nDiscover-Tech operated a specialized system called Controlium that converted routine commercial advertising auctions into an expansive surveillance apparatus. After analyzing 4 billion bidding records, researchers found that the company distributed ads across nearly 200,000 unique websites and mobile apps on Android and iOS in dozens of countries during a four-month period.\n\u201cDiscover-Tech serves roughly 10 million ad impressions a day, and each one feeds an identity graph built from device fingerprints, IP addresses, advertising IDs, and often the publisher\u2019s own first-party cookies,\u201d said Confiant.\n\nInvestigators found that the ads routinely collected user session cookies, authenticated login tokens, and personal identifiers directly from publisher websites, exfiltrating the data even when European Union privacy regulations strictly barred processing without consent.\nCitizen Lab also revealed that an affiliated threat actor, dubbed Dark Cartographer, utilized Discover-Tech\u2019s infrastructure to exploit vulnerabilities across mobile telecom providers, matching digital advertising identities to physical phone numbers to deanonymize mobile subscribers en masse.\n\u2013 Focus on Palestine, sensitive targets\nGeographic telemetry revealed sharp traffic spikes pointing to deliberate intelligence operations rather than ordinary commercial advertising campaigns.\nPalestine emerged as the most heavily targeted territory, where Discover-Tech served nearly 2% of all digital advertisements in the territory, peaking at roughly 10% on April 7, with one in every 36 Android ads originating from the firm.\nSurveillance traffic also landed directly on sensitive administrative and institutional networks, including the Armenian Prime Minister\u2019s Office, international bodies, judicial agencies, universities and defense organizations.\nInvestigators detected surgical handoffs to Candiru servers in nine countries, with Belgium accounting for 56% of observed activity, followed by the United Arab Emirates, Saudi Arabia, Bahrain, Mexico, Spain, and others.\nAfter the joint investigation was disclosed, Google, the European advertising association IAB Europe, Beeswax, Vungle, and Eskimi severed Discover-Tech\u2019s access to their digital advertising systems."
                ],
                "output": "readability",
                "pwd": "/data/archive/1792102013.774076",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-16T01:25:41.976269+00:00",
                "status": "succeeded"
            }
        ],
        "screenshot": [],
        "singlefile": [],
        "title": [
            {
                "cmd": [
                    "curl",
                    "--silent",
                    "--location",
                    "--compressed",
                    "--max-time",
                    "120",
                    "--user-agent",
                    "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) curl/curl 8.14.1 (x86_64-pc-linux-gnu)",
                    "https://www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/"
                ],
                "cmd_version": "curl 8.14.1 (x86_64-pc-linux-gnu)",
                "end_ts": "2026-10-16T01:25:41.966434+00:00",
                "index_texts": null,
                "output": "Israeli firm weaponized digital ad network for spyware attacks, research shows \u2013 Middle East Monitor",
                "pwd": "/data/archive/1792102013.774076",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-16T01:25:41.924539+00:00",
                "status": "succeeded"
            }
        ],
        "wget": [
            {
                "cmd": [
                    "wget",
                    "--no-verbose",
                    "--adjust-extension",
                    "--convert-links",
                    "--force-directories",
                    "--span-hosts",
                    "--no-parent",
                    "-e",
                    "robots=off",
                    "--reject=js,mjs,woff,woff2,ttf,otf,eot,mp4,m4v,mov,webm,ogv,mkv,avi,flv",
                    "--timeout=120",
                    "--restrict-file-names=windows",
                    "--page-requisites",
                    "--user-agent=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36 ArchiveBox/0.7.4 (+https://github.com/ArchiveBox/ArchiveBox/) wget/GNU Wget 1.21.3",
                    "--compression=auto",
                    "--timestamping",
                    "https://www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/"
                ],
                "cmd_version": "GNU Wget 1.21.3",
                "end_ts": "2026-10-16T01:25:41.913515+00:00",
                "index_texts": null,
                "output": "www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/index.html",
                "pwd": "/data/archive/1792102013.774076",
                "schema": "ArchiveResult",
                "start_ts": "2026-10-16T01:25:30.892747+00:00",
                "status": "succeeded"
            }
        ]
    },
    "icons": null,
    "is_archived": true,
    "is_static": false,
    "latest": {
        "archive_org": null,
        "dom": null,
        "favicon": "favicon.ico",
        "git": null,
        "media": null,
        "pdf": null,
        "screenshot": null,
        "singlefile": null,
        "title": "Israeli firm weaponized digital ad network for spyware attacks, research shows \u2013 Middle East Monitor",
        "warc": null,
        "wget": "www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/index.html"
    },
    "link_dir": "/data/archive/1792102013.774076",
    "newest_archive_date": "2026-10-16T01:25:43.995435+00:00",
    "num_failures": 0,
    "num_outputs": 6,
    "oldest_archive_date": "2026-10-16T01:25:29.634615+00:00",
    "path": "/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/",
    "schema": "Link",
    "scheme": "https",
    "snapshot_id": "a644024b-99c2-4c57-b663-bfb526e1c06e",
    "sources": [
        "/data/sources/1792102013-import.txt"
    ],
    "tags": ",war-wiki,pool,escalation",
    "tags_str": "war-wiki,pool,escalation",
    "timestamp": "1792102013.774076",
    "title": "Israeli firm weaponized digital ad network for spyware attacks, research shows \u2013 Middle East Monitor",
    "updated": "2026-10-16T01:25:29.634424+00:00",
    "updated_date": "2026-10-16 01:25",
    "url": "https://www.middleeastmonitor.com/20261015-israeli-firm-weaponized-digital-ad-network-for-spyware-attacks-research-shows/"
}