\n
![](\"https:\/\/hamsonews.com\/en\/wp-content\/uploads\/2026\/10\/6237868.jpg\")
<\/p>\n
\n<\/p>\n
TEHRAN \u2014 Recent disclosures from digital defense watchdogs have exposed an obscure Tel Aviv-registered advertising company, Discover-Tech, running aggressive online ad campaigns designed to geolocate and track users of SpaceX\u2019s Starlink satellite internet network across more than 100 countries.<\/p>\n
Investigative research by TrendAI, a division of Tokyo-based Trend Micro, revealed that Discover-Tech became the dominant global bidder for ad space displayed to Starlink terminals, according to a Reuters report on Oct. 27.<\/p>\n
Operating under the internal threat codenamed “Shadow-Earth-79,” the Israeli firm captured an implausibly high share of ad auctions in restricted or conflict-heavy jurisdictions including Syria, Libya, Yemen, South Sudan, and Venezuela.\u00a0<\/p>\n
By harvesting the metadata embedded in real-time bidding requests, Discover-Tech systematically turned routine browser traffic into an active intelligence pipeline.<\/p>\n
From ad impressions to silent infiltration<\/strong><\/p>\n Programmatic ad auctions rely on instant exchanges of telemetry. Every time an advertisement loads on a web page or mobile application, a bid request transmits the user’s IP address, device model, software configuration, autonomous system number, and exact location parameters to participating ad networks.<\/p>\n Discover-Tech leveraged this routine infrastructure to build a comprehensive tracking map.<\/p>\n TrendAI concluded that the firm\u2019s bidding behavior reflected a dedicated tracking operation rather than commercial marketing, noting that legitimate Western advertising demand in heavily sanctioned states is virtually non-existent.<\/p>\n On observed Starlink connections, Discover-Tech accounted for nearly 13 percent of winning ad bids worldwide.<\/p>\n The surveillance mechanism went far beyond passive location mapping. Concurrent technical investigations by Canada\u2019s Citizen Lab and ad-security firm Confiant exposed a sophisticated exploitation vector named “AdFection.”<\/p>\n Discover-Tech’s proprietary ad platform served as a conduit, connecting mainstream advertising exchanges directly to mercenary spyware operators. When a targeted device loaded a background advertisement, Discover-Tech servers screened the incoming telemetry.<\/p>\n High-value targets were served malicious JavaScript that delivered zero-click attack payloads without requiring any user interaction, while ordinary users received empty responses.<\/p>\n Citizen Lab confirmed with high confidence that at least 45 devices belonging to news personnel at Al Jazeera were targeted with Candiru spyware through this ad-driven vector.<\/p>\n \u00a0Starlink and the military-industrial infrastructure<\/strong><\/p>\n The focus on Starlink underscores how low-Earth-orbit satellite constellations have become central to Western military strategy and intelligence operations.<\/p>\n SpaceX’s Starlink network bypasses land-based telecommunications gateways, routing data through satellite links to circumvent national regulatory frameworks and local internet blocks.<\/p>\n The U.S. Department of “War” and NATO forces have integrated Starlink and its military-grade derivative, Starshield, into frontline combat operations. In Ukraine, the technology provides primary battlefield command architecture, directing artillery, facilitating real-time satellite coordination, and guiding long-range combat drones.<\/p>\n This deep integration into Western military operations makes Starlink terminals prime targets for intelligence agencies.<\/p>\n Intelligence outfits seek to identify, geolocate, and compromise satellite terminals operating inside sensitive sovereign territory.<\/p>\n Israeli-owned firms were already pitching commercial clients on specialized methodologies to map and deanonymize Starlink subscribers by exploiting commercial ad data.<\/p>\n The Discover-Tech operation confirms that these theoretical pitches were already operationalized at a global scale, turning satellite terminals into beacons for military intelligence gathering.<\/p>\n The broader ecosystem of Israeli cyber warfare<\/strong><\/p>\n Discover-Tech represents the latest evolution of a commercial cyber-arms ecosystem cultivated by the Israeli regime.<\/p>\n For decades, intelligence entities such as Unit 8200 and Mossad have maintained an institutional pipeline into private surveillance vendors, enabling former Israeli operatives to commercialize state-funded hacking techniques.<\/p>\n Discover-Tech\u2019s corporate history shows direct ties to veteran surveillance executives, including past directors associated with Circles, an affiliate of NSO Group, and Senpai Technologies, linked to the Intellexa consortium.<\/p>\n This ecosystem includes a wide network of offensive vendors. NSO Group gained global infamy through its Pegasus software, which infected the phones of diplomats, political opponents, and human rights defenders.<\/p>\n Candiru, operating under various corporate names such as Saito Tech and Integrity Labs, specialized in zero-click desktop compromises. Paragon Solutions markets its Graphite interception software, while Intellexa and Cytrox developed the Predator spyware suite.<\/p>\n Other key players include Cognyte, Cytrox, Cellebrite, and Black Cube, the private intelligence agency staffed by former Israeli operatives specializing in deception and corporate espionage.<\/p>\n These entities routinely establish international shell companies across Europe to bypass nominal export restrictions and maintain access to global markets.<\/p>\n \u00a0Industry self-censorship and structural vulnerability<\/strong><\/p>\n Despite the scale of Discover-Tech\u2019s operations, accountability remains hindered by self-censorship within the commercial security sector.<\/p>\n TrendAI initially omitted Discover-Tech\u2019s name from its public report, opting instead for the “Shadow-Earth-79” alias after corporate executives raised legal concerns.<\/p>\n This practice allows offensive operators to evade immediate platform bans and legal scrutiny.<\/p>\n Following the public identification by Citizen Lab and news outlets, major tech platforms including Google, Comcast’s Beeswax, Vungle, and Eskimi cut off Discover-Tech\u2019s access, while IAB Europe suspended the firm from its approved vendor list.<\/p>\n Internal inquiries were also launched by a major U.S. technology corporation and an international organization to evaluate potential employee targeting.<\/p>\n These platform removals disrupt specific operational routes, but the underlying vulnerability remains unaddressed.<\/p>\n Discover-Tech operated inside approved industry registries for years, utilizing standard European data privacy frameworks to collect targeting parameters.<\/p>\n As long as commercial advertising exchanges permit real-time data harvesting, state-aligned surveillance contractors will continue to use programmatic ad bidding as an unregulated, low-cost vector for global espionage.
\n
\n \u00a0<\/p>\n<\/p><\/div>\n