Qatar

Citizen Lab investigation says dozens of Al Jazeera devices were infected by malware planted through advertisements.

Israeli advertising technology company Discover-Tech helped place spyware on dozens of devices used by Al Jazeera and other companies, a Citizen Lab investigation prompted by Al Jazeera’s own initial internal probe has confirmed.

Al Jazeera Media Network on Thursday said it “condemns the targeting of devices belonging to several of its employees with spyware”.

“The network voluntarily collaborated with the researchers, and this cooperation, according to the report, contributed to verifying these attacks and publicly documenting them.”

Al Jazeera will continue to “protect its employees and systems”.

The network said targeting journalists is an “assault on press freedom and the public’s right to knowledge” and called for those responsible to be held accountable.

Spyware from Candiru, a firm blacklisted by the United States government in 2021 for its malicious cyber activities, was planted on these devices, using what Citizen Lab described as the first-known instance of “zero-click” targeted advertising.

The Citizen Lab, an interdisciplinary research unit at the University of Toronto, concluded in its report that Discover-Tech purchased the advertisements that had the spyware built in. It then directed devices to Candiru’s malware through these advertisements. The millions of devices that were pointed to the malware include several that belonged to Al Jazeera’s journalists – including several who reported on sensitive subjects.

Al Jazeera’s internal technology team first discovered unusual patterns on devices used by some journalists in 2024. The pattern continued into 2025. Al Jazeera reached out to Citizen Lab for a more detailed investigation into its suspicions that spyware was responsible.

“Analysis of network logs provided to the Citizen Lab by Al Jazeera collected during the attack period provides a clear temporal signature of how the attack was executed,” the University of Toronto-based team said ints report published Thursday.

The “zero-clock” nature of installing this spyware means that once an infected advertisement appears on a device, that device, too, is infected — spying on, and feeding, all the data and information available on that platform to those stealing it.

Meanwhile, New York-based security firm Confiant said in a separate report that some of Discover-Tech’s advertisements also appeared in critical networks used by the Pentagon, the International Atomic Energy Agency and the International Criminal Court.

Candiru’s spyware has previously been used to carry out surveillance on at least 100 journalists, dissidents and others in several countries.

Sheikh Tamim bin Hamad Al Thani says Qatar has demonstrated its strength and cohesion.

Qatar’s Emir Sheikh Tamim bin Hamad Al Thani has told the Shura Council that the region has faced “exceptional events”, following months of instability amid the United States-Israeli war on Iran.

Speaking in the Qatari capital, Doha, on Tuesday morning, Sheikh Tamim said the events had demonstrated the strength and cohesion of the country’s state institutions.

“Our country and the region have faced exceptional events that have once again proven the cohesion of state institutions,” the Emir said.

Qatar has found itself caught up in the war, which began on February 28 and has triggered a global energy crisis. The Gulf state has been directly attacked by Iran on several occasions, including in March, when Tehran struck Qatar’s Ras Laffan gas facility, the world’s largest liquefied natural gas (LNG) production site.

Sheikh Tamim said Qatar had been able to absorb the consequences of the regional instability due to policies implemented before the war, stressing that Doha’s preference was to resolve conflicts through peaceful means and dialogue. However, the Emir maintained that the Gulf Cooperation Council’s (GCC) security was non-negotiable.

“The security of the Gulf Cooperation Council states and the preservation of their sovereignty is a matter that cannot be compromised on,” he said.

The war on Iran has disrupted global supply routes, particularly the Strait of Hormuz, which Tehran has effectively blocked since the start of the conflict.

Sheikh Tamim said efforts to safeguard maritime routes must be increased.

“Efforts must be doubled to secure navigation in the Gulf and the Strait of Hormuz and to protect energy facilities and civilian infrastructure.”