TrendAI (Trend Micro) researchers allege that the Israeli advertising tech company Discover-Tech used digital advertising real-time bidding to track SpaceX Starlink users across more than 100 countries, including places where Starlink is restricted.

The operation reportedly led ad buyers in Syria, Libya, Yemen and South Sudan, with researchers reconstructing software features that point to tracking infrastructure rather than standard advertising.

TrendAI identified Discover-Tech by name after previously referring to it as “Shadow-Earth-79,” noting its attribution approach aims to minimize errors and avoid hype-driven labels.

The investigation focuses on real-time bidding data, which can reveal device information such as IP addresses, advertising IDs, and location data, enabling cross-session profiling without ad clicks.

IP-based country estimates carry uncertainty, and data came from a single ad-buying platform, so the figures are not representative of the entire advertising market.

The broader privacy implications are noted, including how government agencies could access such data and the general pattern of surveillance via advertising ecosystems.

TrendAI recommends limiting ad traffic on sensitive devices, reducing permissions, turning off ad personalization, and avoiding reliance on ad-supported apps, while stressing that hiding ads does not stop tracking requests.

Researchers say ad tech and real-time bidding can leak user data to bidders, enabling de-anonymization, online tracking, and potential spyware deployment.

The analysis indicates in-app and web ad auctions can leak location and device data, gradually enabling identity tracking and online surveillance.

The allegations concern misuse of advertising data, not a confirmed breach of SpaceX satellites or networks, and receiving a Discover-Tech ad does not prove device infection.

Real-time bidding mechanics expose device and location data to multiple bidders, potentially enabling broad tracking without compromising Starlink infrastructure.

The piece highlights tensions between cybersecurity research and legal/commercial risk in attributing wrongdoing, noting firms may hesitate to name defendants outright.