Skip to content
European Crisis TV
ReportRegionalBriefUnverified

Researchers allege advertising network enabled large-scale online surveillance

Two cyber research groups said digital advertising systems were used for tracking and possible spyware targeting, according to Vijesti.

By ECTV Crisis DeskEditor-in-chief: Erik FerdinandPublished 1 independent sources · 40% confidence
Location: Europe. Open the live Europe Crisis Map

Researchers at Citizen Lab and cyber security company Confiant have alleged that online advertising infrastructure was used to identify and track internet users and facilitate spyware targeting, according to a report by Vijesti citing Reuters.

The researchers named the advertising operation Discover-Tech and said its access to ad-placement systems enabled tracking across websites and mobile applications.

The report said advertisements associated with the operation appeared on sites used by EU and NATO institutions as well as on many other services. Their presence alone does not establish that those institutions' devices were infected.

Citizen Lab said advertising associated with the network had appeared across a large number of sites and applications. Estimates of potential reach concern exposure to ads, not verified numbers of devices successfully compromised.

The research described techniques using real-time advertising auctions and data matching to locate potential targets. Some advertising activity was reportedly connected to spyware vendors.

Confiant said the advertisements it associated with particular spyware activity represented only a small fraction of the wider network's volume.

Vijesti reported that the company had not responded to Reuters' requests for comment. The claims remain attributed to the researchers and are not presented as judicial findings.

The allegations raise risks for European organisations because ordinary advertising systems could potentially help identify targets before an intrusion attempt.

The supplied reporting did not include an independently confirmed total of affected individuals or proof that every device displaying an advertisement was compromised.

Follow this story

An email when there is a real update (a new toll, a cause, an arrest). Nothing else; stop with one click.

Free: one story at a time. Members follow as many stories as they like.

What we know

  • 1 outlet Researchers at Citizen Lab and cyber security company Confiant have alleged that online advertising infrastructure was used to identify and track internet users and facilitate spyware targeting, according to a report by Vijesti citing Reuters.
  • 1 outlet The researchers named the advertising operation Discover-Tech and said its access to ad-placement systems enabled tracking across websites and mobile applications.

Not yet confirmed

  • Unconfirmed The investigation findings and disputed allegations have not been independently confirmed.

How each fact is established: Verified checked by an ECTV editorOfficial stated by an official body2+ outlets reported independently by two or more news organisations1 outlet reported by a single news organisation so farUnconfirmed claimed or reportedHow we label facts

Why it matters for Europe

Citizen Lab said advertising associated with the network had appeared across a large number of sites and applications. Estimates of potential reach concern exposure to ads, not verified numbers of devices successfully compromised.

Sources

Reported by 1 reports from 1 independent outlets in 1 countries.

Source balance

Premium

See how the 1 outlets behind this story spread from left to right, and which are official or OSINT sources.

Free during the launch: create an account →Log inHow we rate sources

Intelligence file

Premium

See how we verified this story

Confidence and impact scores, the full situation report and the event timeline.

Launch offer: free for members until 31 October 2026

Questions and answers

What happened?
Researchers at Citizen Lab and cyber security company Confiant have alleged that online advertising infrastructure was used to identify and track internet users and facilitate spyware targeting, according to a report by Vijesti citing Reuters.
What remains unconfirmed?
The supplied reporting did not include an independently confirmed total of affected individuals or proof that every device displaying an advertisement was compromised.

This article was written with AI assistance from 1 verified reports and checked under the ECTV editorial policy. Spotted an error? Request a correction.

Share this story

europesecurityeurope