DoubleChecks

What was claimed

Israeli spyware is confirmed on our phones [...] An Israeli ad company used ordinary online ads to plant spyware on people’s devices, and nobody had to click anything. The ad just had to load

Our verdict

Accurate

Researchers linked Israeli-registered Discover-Tech and its Controlium platform to targeted malicious ads used to deliver spyware, including infections observed at Al Jazeera.

Combined assessment15 sourcesChecked Oct 17, 2026

Why this verdict

  • Israeli spyware is confirmed on our phones.

    Misleading
    One assessment reached this conclusion; one differed·Claude: Verified

  • An Israeli ad company used ordinary online ads to plant spyware on people’s devices, and nobody had to click anything — the ad just had to load.

    Verified
    All assessments reached this conclusion

  • The ad just had to load.

    Verified
    All assessments reached this conclusion

  • Nobody had to click anything for infection to occur

    Verified
    All assessments reached this conclusion

Evidence reviewed

15 sources

Perplexity, Claude and ChatGPT sources are combined here.

yahoo.comx.comx.comblackbookaudit.commartincid.comuniladtech.comca.news.yahoo.comtheregister.comtheverge.comuk.pcmag.com

Individual assessments

Assessment summary

  • The response is substantially supported by current reporting and a Citizen Lab investigation.
  • The wording is somewhat broad: evidence confirms targeted zero-click spyware delivery through ads, not that spyware was confirmed on everyone’s phones.yahoo.com theregister.com theverge.com

Claims reviewed

Israeli spyware is confirmed on our phones.

Misleading
The evidence confirms spyware infections on specific investigated devices and demonstrates a delivery method, but it does not establish that spyware is present on everyone’s phones.yahoo.com theregister.com theverge.com

This claim may mislead readers without added context.

An Israeli ad company used ordinary online ads to plant spyware on people’s devices.

Verified
Researchers linked Israeli-registered Discover-Tech and its Controlium platform to targeted malicious ads used to deliver spyware, including infections observed at Al Jazeera.yahoo.com theregister.com theverge.com

The ad just had to load.

Verified
Reports state that rendering the targeted ad could trigger device identification and exploitation through the ad’s code.blackbookaudit.com ca.news.yahoo.com uk.pcmag.com

Assessment summary

  • The statement accurately describes a confirmed incident involving Israeli spyware delivered through online ads without user interaction.
  • Researchers from the University of Toronto's Citizen Lab documented this as the first public confirmation of zero-click mercenary spyware delivered via targeted ads, using an Israeli ad company called Discover-Tech and its Controlium platform.

Claims reviewed

Israeli spyware is confirmed on phones

Verified
Citizen Lab confirmed spyware from Israeli company Candiru was planted on devices, including 45 Al Jazeera devices, using Discover-Tech's advertising platform upi.com cybersecuritynews.com.

An Israeli ad company used ordinary online ads to plant spyware

Verified
Discover-Tech, an Israeli advertising firm, used its Controlium platform to deliver spyware through ordinary-looking personalized ads upi.com cybersecuritynews.com.

Nobody had to click anything for infection to occur

Verified
The technique is called 'zero-click' or 'no-click' spyware, meaning users did not need to interact with ads to be infected upi.com cybersecuritynews.com.

Assessment summary

  • The main claim matches a technical report by the Citizen Lab showing an Israeli-registered ad firm (Discover‑Tech) used targeted ads to deliver zero‑click spyware.
  • The report documents ads that only had to load to identify and, for selected targets, deliver exploit code linking the infections to Candiru.

Claims reviewed

An Israeli ad company used ordinary online ads to plant spyware on people’s devices, and nobody had to click anything — the ad just had to load.

Verified
Citizen Lab’s October 15, 2026 report (AdFection) documents Discover‑Tech using targeted ads that sent device identifiers and then, for selected targets, returned JavaScript that led to zero‑click Candiru spyware infections; the ads did not require a user click. citizenlab.ca thehackernews.com

Check your own claim

Paste any statement, headline, or AI answer. Independent assessments check it and compare sources.

Share this result