Israeli firm used online ads to run vast spy operation, researchers say