
Cybersecurity researchers and sources cited by Reuters say Israeli ad-tech firm Discover-Tech allegedly placed large volumes of ads targeting Starlink users, raising concerns that advertising auction data could be used to geolocate, profile or surveil people.
Researchers from TrendAI, the cybersecurity research unit of Trend Micro, have raised concerns that Israeli advertising technology company Discover-Tech may have used digital advertising systems to target users of SpaceX’s Starlink satellite internet service for potential surveillance.
According to a Reuters six people familiar with the findings said Discover-Tech was among the biggest bidders for advertisements displayed to Starlink users. Researchers reportedly found the company ranked as the leading bidder for Starlink-related advertising traffic in more than 100 countries, including locations where the service is restricted or banned.
The concern centres on real-time advertising auctions, which can expose information about users and their devices to advertisers bidding to display ads. When such data is collected over time and combined with other information, it may help identify users, infer their locations and track their online activity. Researchers warn that these profiles could potentially be used to select individuals for more targeted surveillance or spyware delivery.
Starlink’s role in regions affected by conflict or internet restrictions makes the allegations particularly sensitive. Satellite connectivity can operate beyond some conventional telecom controls, and the service has supported communications in environments where access to reliable internet is strategically important.
In a report published on October 15, TrendAI tracked the suspected activity under the codename “Shadow-Earth-79,” without publicly naming Discover-Tech. Its analysis described suspicious advertising patterns across Starlink traffic and several sensitive or conflict-affected regions. The report characterised the activity as “targeting and tracking infrastructure rather than a commercial advertising operation.”
A separate investigation by cybersecurity research group Citizen Lab and advertising security company Confiant also identified Discover-Tech in connection with alleged abuse of the digital advertising ecosystem. Their findings said ads associated with the company had appeared within sensitive networks linked to media organisations, governments and technology companies. Reuters reported that Google, Comcast and other firms had removed Discover-Tech from their advertising platforms following investigations.
TrendAI’s findings do not, by themselves, establish that every Starlink user was monitored or that Starlink’s satellite network was breached. The alleged technique concerns information potentially exposed through advertising systems rather than proof of a direct compromise of the satellite service.
Reuters reported that SpaceX, Discover-Tech and its chief executive had not responded to requests for comment. The allegations underscore wider concerns about how advertising technology can be misused to gather intelligence on people using digital services.
