Full Breakdown
Israeli Ad-Tech Firm Discover-Tech Targeted Starlink Users Across 100+ Nations
By Drooid · · How we work
In this breakdown
01
Core Event
On October 27, Reuters reported that cybersecurity researchers at TrendAI, a unit of Trend Micro, identified Israeli advertising-technology company Discover-Tech as the dominant bidder for digital ads shown to users of SpaceX’s Starlink satellite-internet service. The researchers concluded that the ad-bidding activity was likely being used to geolocate and surveil Starlink users, especially in regions where the service is banned or restricted.
Watch
Related reporting
ddhq
What to know about Flydubai cockpit clash as pilot is arrested
ddhq
What to know about Flydubai cockpit clash as pilot is arrested
02
Background & Context
Starlink’s satellite terminals bypass national telecom regulators, allowing users in conflict zones and authoritarian states to access uncensored internet. This capability has made the service a strategic asset for militaries—most notably Ukraine’s armed forces, which rely on Starlink for frontline communications and drone-strike coordination. Because the ad-bidding ecosystem can inadvertently expose user-level data (e.g., device type, location), it has become a “cottage industry” for entities seeking to track satellite-internet users.
03
Data & Statistics
- TrendAI researchers found that Discover-Tech was the No. 1 bidder on Starlink traffic in more than 100 countries, including several where Starlink is prohibited.
- The firm was the top ad buyer in Syria, Libya, Yemen and South Sudan and the second-largest buyer in Afghanistan, markets where legitimate Western advertising demand is essentially nil.
- It also secured an “implausibly dominant share” of bids in Hungary, Israel, Egypt, Azerbaijan and Venezuela.
These patterns, reported by TrendAI, suggest a focus on targeting and tracking infrastructure rather than commercial advertising.
04
Official Statements & Responses
- TrendAI explained that its October 15 report referred to the entity only as “Shadow-Earth-79” to avoid “hype-driven labels” and potential legal repercussions.
- Google, Comcast and other advertising platforms announced that they had removed Discover-Tech from their ad ecosystems following the investigations.
- Citizen Lab (a Canadian cyber-research group) and Confiant (a U.S. Both groups warned that the leaked data can be aggregated to de-anonymize users and facilitate surveillance-software deployment.
- Haaretz and Intelligence Online reported that Israeli-owned businesses were marketing services to identify and track Starlink users, with ad-data identified as a key component of the tracking methodology.
05
Conflicting Reports & Gaps
- TrendAI’s internal deliberations revealed that the team considered naming Discover-Tech in the October 15 report but ultimately refrained due to “legal concerns” raised by senior executives. The exact nature of those legal concerns remains unspecified.
- While Citizen Lab and Confiant allege that Discover-Tech’s ads were used to deliver spyware to entities such as Al Jazeera, no conclusive public evidence has been presented linking specific ad impressions to successful spyware deployments.
06
Why It Matters
The case illustrates how digital-advertising infrastructure can be repurposed for state-level surveillance, especially against users of satellite-internet services that operate outside traditional regulatory frameworks. If ad-bidding platforms continue to allow such exploitation, the privacy of individuals in conflict zones and authoritarian regimes may be compromised, undermining the strategic advantage that services like Starlink provide.