Israeli firm linked to Starlink tracking

An Israeli company, Discover-Tech, is suspected of using online advertising to track users of SpaceX's Starlink service, according to reports from Reuters and TrendAI. Researchers found unusual activity in countries where Starlink is banned or restricted, suggesting the ads might be used for surveillance.

Unusual ad activity identified

TrendAI, the cybersecurity unit of Trend Micro, found abnormally concentrated purchases of advertising space on Starlink connections. Researchers analyzed advertising bids and identified an unusually active buyer who was the top bidder in 105 countries, including France. Their activity in Syria, Libya, Yemen, and South Sudan suggests motives beyond simple product sales.

Tracking through ad data

When an ad placement is auctioned, potential buyers receive information like IP addresses, device characteristics, and location to decide how much to pay. This data can be used to track users or create profiles without their knowledge. The ad itself can also run code without user interaction, potentially allowing surveillance or data collection.

Spyware linked to the company

In a separate report, Citizen Lab found infections by the Candiru spyware, which was distributed through ads purchased by Discover-Tech on devices used by Al Jazeera. TrendAI referred to the suspected buyer as SHADOW-EARTH-79. Researchers considered naming Discover-Tech but faced legal concerns from the company's management.

Exclusions and investigations

Google and the advertising platform Beeswax, owned by Comcast, have excluded Discover-Tech from their services. A major American technology company and an international organization have also launched internal investigations. Neither SpaceX nor Discover-Tech responded to Reuters' requests. The case raises questions about how advertising platforms might be aiding surveillance efforts.