Targeted ads delivered spyware to 45 devices through a vendor Google listed

Targeted ads delivered spyware to 45 devices through a vendor Google listed

By Luis Rijo
Publication Date: 2026-10-19 04:53:00

Advertising technology was built to put a message in front of one person among millions. On Sunday, a report showed what happens when the message is not an advertisement at all. Researchers traced mercenary spyware to ads bought through ordinary programmatic channels, delivered by a company that Google and IAB Europe had both listed as a vendor for years. The rest of the day’s news, from Meta’s contract terms to Google’s data uploads and Amazon’s automated campaigns, turned on the same question: what travels through the ad system, and who checks it.

PPC Land reported on October 18 that Google drops ad vendor it listed since 2020 after 45-device spyware attack. The source is an October 15 report by Citizen Lab at the University of Toronto, written by Bill Marczak, Wolfie Christl, John Scott-Railton, Astrid Perry, Siena Anstis and Ron Deibert. It concludes, with what it calls high confidence, that targeted ads bought by Discover-Tech, an Israeli company, delivered spyware made by…