Skip to content
Israeli Ad Tech Firm Linked to Global Spyware Campaign Targeting Starlink Users

Israeli Ad Tech Firm Linked to Global Spyware Campaign Targeting Starlink Users

First seen 27 Oct 2026, 12:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 27, 2026 at 15:19 UTC
  • •Discover-Tech is linked to a spyware campaign targeting Starlink users globally.
  • •Pakistan recorded approximately 139 million ad bids associated with this spyware operation.
  • •Major platforms like Google have cut off Discover-Tech from their advertising networks.

An Israeli ad tech company, Discover-Tech, has been implicated in a spyware campaign targeting users of SpaceX's Starlink satellite internet service. Researchers from TrendAI and Citizen Lab found that Discover-Tech was the leading bidder for ads shown to Starlink users, potentially allowing for user surveillance and geolocation. The campaign, termed 'AdFection', involved malicious ads that could deliver spyware without user interaction, affecting millions of devices globally. Pakistan was identified as the second-highest target, with 139 million ad bids linked to this spyware operation, following Yemen. The Australian Broadcasting Corporation also reported wiping devices after exposure to these ads. Discover-Tech has been removed from major advertising platforms, including Google and IAB Europe, due to its activities. The full extent of the surveillance and whether Starlink users were directly infected remains unclear.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-15
Citizen Lab report published
Citizen Lab released findings linking Discover-Tech to spyware delivery through ads, affecting millions of users.
Phoneworld.Pk
2026-10-23
Discover-Tech named in multiple reports
Reports confirmed Discover-Tech's role in a spyware campaign affecting users in Pakistan and Australia.
Techjuice.Pk
2026-10-27
TrendAI report identifies Discover-Tech
TrendAI revealed Discover-Tech as the operator behind Shadow-Earth-79, targeting Starlink users.
Jpost

More articles in this cluster (6)

Following this threat?

Track Candiru and Al Jazeera in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (14)

1 / 2

Common questions

How many users are affected?
While exact numbers are unclear, Pakistan saw around 139 million ad bids linked to the spyware campaign.
What should organizations do?
Organizations should review their ad networks and monitor for signs of spyware exposure, especially if using Starlink.
Is there a known patch for this issue?
There are no specific patches mentioned; however, Discover-Tech has been removed from major advertising platforms.