[DECODED] New Threat: Data Harvesting Without User Interaction

Recent developments in data privacy show that malicious actors can now access consumer information without any user interaction. This alarming trend raises new concerns about digital security.

A New Era of Data Privacy Threats

Historically, data breaches required user engagement, such as clicking on deceptive ads or participating in misleading quizzes, like those used by Cambridge Analytica in 2018. This firm exploited data from over 87 million Facebook users, including more than 1.1 million Filipinos, to influence political campaigns.

Recent reports indicate that malicious actors have developed new methods to spy on users through online ads without requiring any user interaction.

Citizen Lab and Confiant Research Teams

Unlike past tactics that needed user clicks, a recent investigation revealed that Israeli company Discover-Tech collaborated with Candiru, a spyware firm banned by the U.S. government. This partnership allowed Candiru to infiltrate users' devices merely by displaying ads.

• Discover-Tech utilized cookie matching to track users.
• Ads served could lead to spyware being planted on devices.

While the ads linked to this spyware were a small fraction of Discover-Tech's total output, the implications are significant. Users are now at risk simply by viewing ads, a drastic change from earlier data collection methods.

The Philippines, having been a testing ground for such strategies, faces unique vulnerabilities. During the Cambridge Analytica scandal, the country was seen as a 'petri dish' for data exploitation techniques, owing to its high social media usage and insufficient regulatory measures.

In response to these threats, Maria Ressa, Nobel Peace Prize laureate and CEO of Rappler, emphasizes the necessity for proactive measures. In her book, *The Fight Back: A Citizen’s Guide to Standing Up to Dictators,* she outlines strategies for individuals and institutions to combat disinformation and protect democracy.

Ressa's work highlights the importance of understanding digital landscapes and empowering citizens to reclaim control over their personal data.