Discover-Tech, an Israeli advertising firm previously linked to the delivery of zero-click spyware, is the top bidder for Starlink ad impressions in 105 countries, according to a new report from Reuters. Researchers say it all points to a large-scale tracking effort aimed at users of SpaceX’s satellite internet service.

John Scott-Railton, a senior researcher at the University of Toronto’s Citizen Lab, posted on X that data from TrendAI suggest the existence of a “worldwide surveillance op targeting @Starlink users.”

Discover-Tech was previously named in Citizen Lab’s October 15th report as the buyer of ordinary-looking ads that delivered Candiru spyware to devices at Al Jazeera without any user interaction. Candiru is an Israeli mercenary spyware vendor (now rebranded as Integrity Labs) that develops tools capable of silently compromising phones and computers. In 2021, the U.S. Department of Commerce’s Bureau of Industry and Security added Candiru to their trade restriction list, known as the Entity List, over concerns it supplied surveillance technology used against journalists, activists, and government officials.

all 19 comments

sorted by: hot top controversial new old
[–] 26 points 1 day ago (3 children)

You should assume your ISP is a hostile party, in cahoots with you goverment's intelligence services. A fail close VPN and adblockers at network level as well as hardened and isolated VM for public content consumption should be your SOP.

  • source
  • hideshow 3 child comments
  • [–] 2 points 20 hours ago (2 children)

    Can you clarify here, are you suggesting that any internet browsing should be via VM?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 20 hours ago

    Preferably. See the Whonix approach in Qubes OS. There you can be only targeted as a class of Tor users, not as an individual. The blast radius of system compromise is limited, requiring a privilege escalation to break out of containment.

  • source
  • parent
  • [–] 50 points 1 day ago (1 child)

    Who could have possibly seen this coming?

  • source
  • hideshow 1 child comment
  • [–] 10 points 1 day ago (1 child)

    I really want to post this to r/IndiaTech on reddit. Few of the fellas there are simps for Starlink because a village with hundreds to a few thousands of people need it (spoiler alert: they don’t. The government owned company BSNL is already laying fibre in villages).

    But I don’t have an account ughh.

  • source
  • hideshow 1 child comment
  • [–] 20 points 1 day ago (8 children)

    The real culprit sounds like web itself, being designed so that browsers can deliver 0-click spyware. Once that capability exists, of course baddies will use it. Surprise directed at the baddies is almost completely misplaced.

  • source
  • hideshow 8 child comments
  • [–] 2 points 13 hours ago (2 children)

    It's your user agent. Disable JavaScript

  • source
  • parent
  • hideshow 2 child comments
  • [–] 11 points 1 day ago (3 children)

    The real culprit is Earth itself, supporting millions of baddies by design.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 15 hours ago

    Well, the web was and is being designed by humans, while the earth only recently is kinda coming under our limited influence. And we sure ain't making good decisions on either one, lately... It's almost as if the people making the decisions, shouldn't have this power...

  • source
  • parent
  • [–] 9 points 1 day ago (1 child)