Citizen Lab found that Discover-Tech bought targeted ads containing Candiru spyware, infecting dozens of devices at Al Jazeera and other companies without clicks. Al Jazeera detected unusual activity in 2024 that continued into 2025; Candiru has been under a US blacklist since 2021.