Several points remain open. Discover-Tech's founder and CEO, Dekel Boni, did not respond to requests for comment, and Al Jazeera did not respond either. Reuters could not reach Candiru's owners. Confiant says the malicious ads reached networks tied to the Pentagon, the International Atomic Energy Agency and the International Criminal Court, and that Palestinian territories were especially saturated with Discover-Tech ads. Those claims rest on Confiant's findings and have not been independently confirmed in the coverage. The ads ran between March and June 2026. Ads reaching a user do not prove the user was infected, and Confiant says the Candiru-linked ads were a small share of Discover-Tech's total volume.
For attorneys, the case connects a documented state-linked spyware campaign to a mainstream ad-tech supply chain. Citizen Lab describes an attack technique it calls "AdFection," in which a malicious ad can deliver spyware without the user clicking it. Google has removed Discover-Tech from its ad platforms, and IAB Europe has suspended the firm from its approved vendor list, so enforcement is already underway. Earlier in 2026 the Pentagon said US forces in war zones had been targeted using location data gathered by ad tech firms and data brokers, and some military branches have since disabled ad tracking on some devices. Watch for sanctions or export actions beyond Candiru, for claims from affected organizations, and for regulatory attention to ad-tech gatekeeping. Clients who run ad campaigns or handle data from ad networks should review their vendor exposure now.