Citizen Lab and Confiant found that Israeli firm Discover-Tech’s “AdFection” operation exploited legitimate online advertising, including on EU and NATO websites, to identify, track and infect millions of phones. Researchers found 45 Al Jazeera staff devices were targeted, some with Candiru spyware.