Discover-Tech accused of targeting Starlink users for surveillance

SpaceX: SpaceX operates the Starlink satellite internet service that provides connectivity in remote or restricted areas. Its terminals have become a key resource for users seeking to bypass local network controls, including in conflict zones. The company did not respond to inquiries regarding the reported ad targeting of its users. TrendAI: TrendAI is a digital defense research unit within a major cybersecurity firm that analyzes advertising data and telemetry for threat detection. Its researchers examined bidding activity on Starlink traffic and concluded that an entity using the codename Shadow-Earth-79 was conducting non-commercial tracking operations. The unit published a report on the targeting in mid-October without naming the specific company involved. Confiant: Confiant is a New York-based advertising technology firm that investigates ad fraud and data leakage in the digital ecosystem. It worked alongside Citizen Lab to expose Discover-Tech's role in collecting information from Starlink users through the ad bidding process. Citizen Lab: Citizen Lab is a Canadian research organization focused on digital security and surveillance issues. It collaborated with an advertising technology firm to publicly identify Discover-Tech as the party responsible for abusive ad bidding practices that can leak user data. Trend Micro: Trend Micro is a Tokyo-based cybersecurity company that operates TrendAI as one of its research units. The parent company provided the telemetry data and analytical framework that supported conclusions about ad-based surveillance of Starlink users. Discover-Tech: Discover-Tech is an Israeli ad tech company that participates in digital advertising auctions worldwide. Researchers identified it as a leading bidder for ads shown to Starlink users across more than 100 countries, with patterns suggesting the activity was focused on tracking rather than standard commercial advertising. The firm has faced prior scrutiny for alleged user surveillance and was publicly identified in recent investigations by multiple cybersecurity and ad technology organizations. Platform Actions: Following the investigations, several major companies including Google and Comcast removed Discover-Tech from their advertising platforms. Surveillance Methods: Bidders in digital ad auctions can collect leaked data about internet users over time and combine it with other information to identify individuals and enable further targeting. Broader Tracking Interest: Israeli media reported in May that Israeli-owned businesses were offering services to identify and track Starlink users, with ad data exploitation highlighted as a key technique.