Overview
- Researchers at TrendAI found in an Oct. 15 analysis that an ad‑bidding entity dominated ad impressions tied to Starlink traffic across more than 100 countries and linked that activity to Discover‑Tech.
- Citizen Lab and ad security firm Confiant separately tied Discover‑Tech’s ad scripts to prior delivery chains for Candiru spyware and showed the ads reached networks at media outlets, governments and tech firms.
- Google, Comcast and other platforms have removed Discover‑Tech from their ad systems, and at least one large U.S. tech company plus an international organization have opened internal inquiries into possible employee targeting.
- The researchers say the vulnerability stems from real‑time bidding, which shares device identifiers and IP data with bidders and can be aggregated to reveal user locations without compromising a provider like Starlink itself.
- The case has prompted short‑term defensive steps such as blocking ad scripts and disabling advertising identifiers and has fueled calls for industry audits and clearer rules on how ad auctions can be used for surveillance.