Israeli firm linked to Starlink tracking investigation


Featured image Israeli firm linked to Starlink tracking investigation

The Shadow Market of Surveillance: How Ad Bidding May Be Fueling Global Espionage

The digital advertising world, often viewed as a realm of commerce and creativity, may conceal a darker undercurrent. Reports have surfaced linking an Israeli advertising technology firm, Discover-Tech, to a sophisticated surveillance effort aimed at Starlink users globally. The theory suggests that the aggressive bidding for ad space related to Starlink traffic across over a hundred nations may have served not commercial purposes, but to map locations and enable broader monitoring.

This suspicion is grounded in deep research from TrendAI, the security research arm of Trend Micro. Their analysis, which they internally dubbed Shadow-Earth-79, points to a pattern that suggests the activity was less about selling ads and more about establishing a tracking infrastructure. The methodology exploits the real-time auction system used to sell online ad space, where each bid request inherently carries details that could be used to identify individuals or track their movements across the web.

The chilling implication is that this mechanism transforms commercial advertising into a potential pipeline for cyber-surveillance. By observing and combining data from these high-stakes auctions, entities could potentially identify targets or select them for deployment of spyware, effectively weaponizing ad technology for intelligence gathering.

The geographical scope of these reported activities further raises serious concerns. The tracking pattern was reportedly most pronounced in regions deeply affected by conflict and sanctions, including Syria, Libya, Yemen, and South Sudan, as well as Afghanistan. Unusually large bidding shares were also noted in countries such as Hungary, Israel, Egypt, Azerbaijan, and Venezuela. Researchers suggest this pattern points toward targeting and tracking infrastructure rather than legitimate commercial advertising demand in these volatile markets.

This finding is not isolated. Other ad security firms and research groups have previously raised alarms about the use of ad auctions for data collection. Allegations have surfaced that Discover-Tech, despite presenting itself as a legitimate advertising company, operated as a facilitator for multiple mercenary spyware partners, collecting data across sensitive networks linked to governments and media organizations.

In response to these serious allegations, major technology platforms have acted. Google and Comcast have publicly stated that they have removed Discover-Tech from their advertising platforms, and both companies have launched internal inquiries into whether the firm’s advertising targeted their employees. This move underscores the vulnerability inherent in the intersection of commercial technology and national security concerns.

The stakes are amplified by the context of the Starlink service itself. As a lifeline for communication in regions where governments restrict internet access—such as during Iran’s nationwide blackout or in conflict zones—Starlink users become attractive targets. The ongoing use of Starlink, for instance, has been complicated by restrictions placed on high-speed military drone operations in areas like Ukraine.

This entire situation taps into a long history of digital privacy abuse. From earlier incidents involving backdoors in iOS ad libraries and the discovery of spyware like Chrysaor linked to the Pegasus family, the trail of technology used for surveillance has become increasingly complex. The current investigation into ad-based tracking introduces another layer to this history, demanding a closer look at how digital commerce can be leveraged by those seeking control.

Ultimately, while it remains unverified whether Discover-Tech specifically used Starlink data to single out individual subscribers, the reported activity forces a critical re-evaluation of the relationship between data, commerce, and security. The focus shifts to understanding how the invisible mechanisms of the digital economy can be co-opted for surveillance, and what safeguards are necessary to protect global digital citizens from these emergent risks.

You may also like: