Israeli Spyware Firm Linked to Global Zero-Click Malware Attacks Targeting Al Jazeera Staff

Israeli cybersecurity firm Candiru has been linked to a “zero-click” malware attack that compromised devices used by Al Jazeera journalists. The attack, which occurred in June 2025, involved malicious advertisements purchased by Discover-Tech, an Israeli company that operates as a facilitator for mercenary spyware partners. These ads were used to redirect Al Jazeera staff to an infected server, allowing the spyware to install itself without requiring any user interaction.

The attack was uncovered through an investigation by the Canada-based Citizen Lab, prompted by Al Jazeera’s internal probe. The research team identified Candiru as the perpetrator, noting that the company had been blacklisted by the US government in 2021 for its role in hacking and surveilling at least 100 activists, journalists, and political figures across 10 countries.

Cybersecurity analysts have described the attack as a significant development in the realm of digital surveillance. Remesh Srinivasan, a professor at the University of California, Los Angeles, emphasized the concerning nature of the findings, stating that the attack represents a new level of targeted surveillance. The ability to infect devices without user action raises serious concerns about the security of digital platforms and the potential for widespread data theft.

Al Jazeera’s in-house technology team first noticed unusual activity on devices used by some journalists in 2024. Analysis of network logs provided to Citizen Lab in 2025 confirmed the timeline and method of the attack. The malicious advertisements were part of a broader strategy to identify and target specific individuals, highlighting the precision and intent behind the operation.

The incident has drawn condemnation from Al Jazeera Media Network, which called for accountability from those responsible. The network’s stance reflects a broader concern about the use of digital tools for surveillance and the need for transparency and ethical standards in the tech industry. The attack underscores the global implications of such activities, particularly when they involve state-sponsored or affiliated actors.

The use of zero-click malware represents a significant evolution in cyber threats, enabling attackers to bypass traditional security measures. This method of exploitation highlights the vulnerabilities in modern digital infrastructure and the urgent need for enhanced cybersecurity protocols. The incident also raises questions about the role of technology companies in facilitating or preventing such attacks.

The attack on Al Jazeera staff serves as a reminder of the broader implications of digital surveillance and the potential for abuse. As technology continues to advance, the balance between innovation and ethical responsibility becomes increasingly critical. The case of Candiru and Discover-Tech illustrates the need for vigilance, accountability, and a commitment to protecting digital privacy and security.

Source: Read the original report