Someone Became the No. 1 Ad Buyer for Starlink Users in 100+ Countries. Reuters Says It Was a Spy Play

中文版 Chinese version

This is an allegation story. The identification of Discover-Tech rests on six unnamed people familiar with the matter speaking to Reuters; neither SpaceX nor Discover-Tech commented, and no company has confirmed the claim. Treat the motive — surveillance — as the researchers’ conclusion as reported, not as proven fact.

What Reuters reported

On October 27, 2026, Reuters published an exclusive: experts at a digital defence firm had found that an Israeli ad-tech company was heavily targeting users of Starlink, SpaceX’s satellite internet service, in what the researchers assessed was a likely effort to spy on them. Reuters cited six people familiar with the matter.

The specifics, as reported:

• Researchers at TrendAI, a unit of Tokyo-based Trend Micro, concluded that the Israeli company Discover-Tech was one of the biggest sources of digital ads shown to Starlink users, and that the ads were likely being used to geolocate or otherwise surveil them.
• Discover-Tech had become one of the world’s leading bidders for ads aimed at Starlink users — and the No. 1 bidder on Starlink traffic in more than 100 countries, including several where Starlink itself is banned or restricted.
• The researchers drew on digital advertising data in TrendAI’s own telemetry.
• TrendAI published a report on October 15 about the targeting of Starlink users but did not name Discover-Tech, calling the actor an “ad tech entity” codenamed Shadow-Earth-79. The six sources told Reuters that Shadow-Earth-79 is Discover-Tech.
• SpaceX did not respond to requests for comment. Discover-Tech and its chief executive did not respond over two weeks. TrendAI did not directly address why it withheld the name, saying its attribution approach aims to reduce the risk of mistakes and avoid “hype-driven labels” or “unstable actor names.”

Why ad auctions are a surveillance tool at all

“Bidding” here is the automated auction that decides which ad appears inside a browser or app. To bid sensibly, a buyer receives or infers signals about the impression: network, approximate location, timing, device and browser characteristics. A buyer willing to outbid everyone else for one specific network’s users is not buying efficient advertising — ordinary advertisers pay for audiences, not for one satellite ISP’s traffic across 100-plus countries, including countries where that service is banned and therefore where its users are, by definition, interesting.

Starlink sharpens the value. Its users disproportionately connect from ships, aircraft, remote sites, disaster zones, and conflict areas — places where the terminal’s location and online timing are themselves intelligence. You do not need the content of anyone’s traffic if you can repeatedly observe where a Starlink user is and when they are active. That is the geolocation logic the TrendAI researchers reportedly reached, and it is why the No. 1-bidder ranking, not the mere presence of ads, is the story’s core number.

The honest caveats

Three things keep this at “alleged,” and they matter:

1. Attribution by codename. TrendAI itself chose not to name the company in its own report. The identification now rests on six unnamed sources bridging “Shadow-Earth-79” to Discover-Tech. That is strong sourcing by wire-service standards, and it is still not a confirmation.
2. No response is not a confession. SpaceX and Discover-Tech staying silent for two weeks is notable, but silence proves nothing about intent.
3. Motive is inferred. The bidding pattern is the documented part; “likely to geolocate or surveil” is a conclusion drawn from that pattern. An aggressive data-broker explanation — buying and reselling location-adjacent signals — would look similar in auction data and would be a privacy problem of a different, lesser kind.

The verdict

Even in its weakest form, the story exposes a structural hole: the ad-tech auction system will happily sell privileged access to the users of a strategically sensitive network to whoever bids most, in countries where that network is not even legal, and nobody in the chain — not the satellite operator, not the exchanges — appears to have flagged it until a security firm’s telemetry did.

If the strong form is true, it is worse: a commercial ad market used as a standing, deniable geolocation tap on satellite users, purchased at auction rather than built as an exploit. Hacks get patched. Auction access gets renewed monthly.

The test to watch is narrow: does anyone with standing — SpaceX, Trend Micro, a regulator — put a name, a dataset, or a denial on the record? Until then, this stays an allegation with unusually specific numbers attached: one bidder, one network, more than 100 countries.

Sources

• Reuters, “Exclusive — Alleged Israeli spy company heavily targeted Starlink users, sources say,” October 27, 2026 (six people familiar with the matter; TrendAI researchers’ conclusion naming Discover-Tech; No. 1 bidder in more than 100 countries including some where Starlink is banned or restricted; October 15 TrendAI report and the Shadow-Earth-79 codename; no response from SpaceX or Discover-Tech over two weeks; TrendAI statement on its attribution approach).