Israeli Firm Suspected of Spying on Starlink Users Via Ad Network
תומצת מתוך Kikar HaShabbat על ידי baba
An Israeli technology firm is under investigation for allegedly using digital advertising networks to track users of Elon Musk's Starlink satellite internet service. The company reportedly purchased significant ad space targeting Starlink users globally, including in countries where the service is restricted. This practice, flagged by cybersecurity firms and researchers, could allow for the identification and monitoring of users, raising concerns about sensitive data collection, particularly in conflict zones. Several major platforms have removed the company from their ad networks.
הידיעה ב-6 שורות · תקציר של baba
- An Israeli tech firm is suspected of using ad networks to track Starlink satellite internet users.
- The company allegedly bought significant ad space, ranking first in offers in over 100 countries.
- The practice could enable user identification and monitoring, especially in sensitive regions.
- Google and other platforms have removed the firm from their advertising networks.
- The investigation was prompted by cybersecurity firms TrendAI, Citizen Lab, and Confiant.
- Starlink's service is vital for communication in conflict zones like Ukraine.
An Israeli technology company is suspected of using digital advertising systems to track users of Elon Musk's Starlink satellite internet service, according to a Reuters investigation based on interviews with six sources familiar with the matter. Researchers at cybersecurity firm TrendAI found the company was a major buyer of ad space shown to Starlink users, ranking first in ad offers in over 100 countries, including nations where Starlink is banned or restricted. The ads are believed to have been used not just for commercial purposes but to gather user location data and monitor their activity.
This method exploits the online advertising process where companies bid automatically to display ads in browsers and apps, potentially exposing user data to advertisers. Such data collection, combined with other sources, could enable the identification and tracking of users, potentially making them targets for spyware. Canadian organization Citizen Lab and U.S. advertising firm Confiant had previously identified the same Israeli company for exploiting ad auction mechanisms, leading Google, Comcast, and others to remove it from their advertising platforms.
Sources told Reuters that a major U.S. tech company and an international organization have launched internal investigations to determine if their employees were targeted by the Israeli firm's ads. TrendAI's October 15 report described suspicious activity by an entity codenamed "Shadow-Earth-79," which sources identified as the Israeli company. The report highlighted unusual ad activity in Syria, Libya, Yemen, and South Sudan, where the entity was the largest ad buyer, and second in Afghanistan. The high volume of ad purchases in these conflict-ridden or sanctioned countries raised suspicions that the activity was a front for user tracking rather than legitimate advertising.
Similar activity was also noted in Hungary, Israel, Egypt, Azerbaijan, and Venezuela. TrendAI researchers considered naming the company in their report but refrained due to legal concerns raised by the company's management. TrendAI stated its identification policy aims to minimize errors and prevent misleading public disclosures. Starlink's service is crucial for internet access in areas with restricted communications or damaged infrastructure, notably for Ukraine's military in the Russia-Ukraine war, making user location data highly sensitive. Previous reports by Israeli newspaper Haaretz and Intelligence Online in May also indicated Israeli-owned businesses offered ways to identify and track Starlink users, likely using digital ad data. The companies involved did not respond to Reuters' requests for comment.
מוזכרים
