IC Technology & Cyber — 2026-10-28

Israeli Ad Firm Discover-Tech Ran Surveillance Operation Targeting Starlink Users in 105 Countries

BLUFAd exchanges and platform operators, not SpaceX or TrendAI, will bear the enforcement burden, as it is very unlikely that SpaceX or TrendAI publicly names Discover-Tech or announces an ad-traffic block by November 30.

Reuters, citing six people familiar with the matter, reported on October 27 that TrendAI, a Trend Micro unit, concluded Israeli firm Discover-Tech was a leading source of ads shown to Starlink users and was likely using them to geolocate or surveil those users 1. TrendAI's October 15 report named the bidder only as SHADOW-EARTH-79, which it found was the top winning bidder on Starlink traffic in 105 countries, with 12.9% of Starlink ads against a 2.6% share of all traffic 23. Reuters said five sources attributed the decision not to name the firm to TrendAI executives' legal concerns, and TrendAI did not directly address why 1. Google, Comcast and others have removed Discover-Tech from their platforms, and Gizmodo noted researchers have not publicly confirmed Starlink device infections 12.

Analysis
Confidence is moderate: four outlets report consistently, but all trace to one Reuters exclusive with a single anonymous-source chain, so the convergence is broad without being independent, and neither SpaceX nor TrendAI has made an on-record statement. SpaceX/Starlink or TrendAI is very unlikely to publicly name Discover-Tech as the source of the ad-based surveillance, or SpaceX to announce a block on its ad traffic, between October 28 and November 30, 2026. TrendAI executives dropped the attribution over legal exposure, and a vendor that left the firm unnamed in its own report has no stated reason to reverse while the sourcing stays anonymous. No observable indicator shows SpaceX can filter ad traffic on its network. Discover-Tech was previously tied to the Candiru spyware operation against Al Jazeera, so its top bidding position on Starlink traffic raises the stakes of the link. An aggressive commercial buyer may instead have exploited cheap, poorly contested Starlink inventory, since researchers have not confirmed any device infection. Pressure will fall on ad exchanges and demand-side platforms, which can cut the bidder off without Starlink. Until then, exchanges, platforms and inquiries by a US firm and an international organization must act on anonymous sourcing alone.
4 sources
  1. Exclusive-Alleged Israeli spy company heavily targeted Starlink users - Reuters (via Global Banking & Finance)
  2. Researchers Uncover Signs of Massive Surveillance Operation on Starlink Users - Gizmodo
  3. Alleged spy firm won ad auctions for Starlink users in 105 countries - PPC Land
  4. Israeli ad tech firm tied to suspected Starlink tracking effort, report claims — researchers say it outbid everyone for Starlink-linked ads in 100+ countries, including where the service is banned - Tom's Hardware

View in full brief →

UNCLASSIFIED // OPEN SOURCE