A digital defense firm has exposed an alleged Israeli surveillance effort targeting users of Starlink, the satellite internet service providing connectivity in restricted and conflict regions. Malicious advertisements served by Discover-Tech harvested data to geolocate users and monitor browser activity without user interaction.
- Discover-Tech used ad platforms to surveil Starlink users globally.
- Malicious ads collected data without requiring clicks or interaction.
- Ad platforms including Google and Comcast have removed Discover-Tech.
What happened
Digital security firm Trend Micro’s unit, TrendAI, discovered that Israeli company Discover-Tech served malicious advertisements heavily targeting Starlink internet users across more than 100 countries. These ads were strategically placed through the ad bidding process to harvest sensitive user data from browsers and apps. Despite Starlink’s role in providing internet via satellite, the served ads functioned to identify and track users without requiring any interaction.
This operation included regions where Starlink use might be restricted or where governments impose internet blackouts, such as conflict zones like Syria, Libya, Yemen, and South Sudan. The data collection techniques involved geolocation and browser surveillance, enabling creation of detailed user profiles that facilitate further espionage efforts.
Why it matters
Starlink’s ability to offer internet connectivity in censored or disrupted regions makes it crucial for users needing resilient communication access, such as journalists, aid agencies, and residents in conflict areas. The revelation that a single entity could leverage advertising infrastructure to stealthily surveil Starlink users highlights significant privacy and security vulnerabilities within the satellite internet ecosystem.
Moreover, the targeting of users bypassing traditional internet restrictions raises geopolitical concerns, as it suggests governments or spy groups may exploit digital ad platforms to monitor populations circumventing local censorship. This undermines trust in both advertising networks and satellite service providers, intensifying calls for stricter oversight and enhanced user protection.
What to watch next
In response to the findings, major online advertising platforms including Google and Comcast have removed Discover-Tech, aiming to disrupt these surveillance campaigns. Watch for further investigations into similar ad-based espionage tactics and whether additional companies or countries are implicated in such efforts.
Stakeholders should also monitor Starlink’s and satellite internet services’ initiatives to strengthen user privacy and security, including enhanced ad filtering and collaboration with regulatory bodies. The broader cybersecurity community will likely push for improved transparency and accountability in digital advertising to prevent future misuse by malicious actors.