Discover-Tech, an Israeli advertising technology company, has reportedly been linked to a suspected surveillance effort aimed at Starlink users, according to Reuters. The report, which cites six people familiar with the matter, claims the firm was the top bidder for ad space tied to Starlink traffic in more than 100 countries. Researchers suspect the aggressive bidding was meant to reveal where users are located or to enable further monitoring — though the findings do not show that anyone was actually tracked.

The data comes from TrendAI, the research arm of Trend Micro. Its October 15 report referred to the activity as ‘Shadow-Earth-79’ without naming a company, but the report claims the codename belongs to Discover-Tech. TrendAI says its attribution process is designed to avoid ‘hype-driven labels’ that could mislead security teams. “Our approach reduces the risk of misattribution, hype-driven labels, and unstable actor names that can mislead defenders, distort risk prioritization, and trigger inappropriate response actions.” The report says.

The method exploits how online ads are sold with advertisers bidding in real-time auctions for space on websites and in apps, and each bid request can carry details about the person on the other end. Collected over time and combined with other data, that information could be used to identify people, follow their activity across the web, or select targets for spyware.

The geography is what raised eyebrows. Shadow-Earth-79 was reportedly the largest ad buyer in Syria, Libya, Yemen, and South Sudan, and the second largest in Afghanistan, while also claiming unusually large shares of bids in Hungary, Israel, Egypt, Azerbaijan, and Venezuela.

Source link