Discover-Tech Accused of Targeting Starlink Users Through Ad-Based Surveillance

Israeli advertising company Discover-Tech allegedly targeted users of SpaceX’s Starlink internet service in a suspected surveillance operation, according to Reuters sources linking the company to TrendAI’s SHADOW-EARTH-79 investigation. TrendAI, a Trend Micro unit, observed disproportionate bidding for Starlink advertising traffic across numerous countries, including conflict-affected locations, and identified software features consistent with intelligence gathering. A related social media report claimed the company was the leading bidder for Starlink ads in 105 countries, although the supplied reporting does not independently establish that ranking.

The suspected operation exploited real-time advertising auctions, whose bid data can expose network information, persistent advertising identifiers, and sometimes location information without users clicking an advertisement. The findings draw on a sample from one advertising buying platform and do not establish a breach of Starlink’s network, confirmed infections, or tracking of every exposed user. Google, Comcast, and other companies reportedly removed Discover-Tech from their advertising platforms. TrendAI recommended controls to prevent sensitive information from reaching advertising systems, highlighting advertising telemetry as an exposure that organizations protecting sensitive personnel should assess.