Discover-Tech operated a surveillance and tracking network disguised as a commercial advertising business, according to Reuters<\/p>\n
An Israeli online advertising company implicated in spyware attacks targeting internet users was heavily active on SpaceX\u2019s Starlink service, Japanese researchers have found, bolstering claims that the firm was running a \u201ctargeting and tracking\u201d operation masquerading as a commercial advertising business.
\nEarlier this month, Canadian cybersecurity watchdog Citizen Lab and New York-based ad security firm Confiant published extensive investigations identifying Discover-Tech, an Israeli advertising technology company, as a middleman helping spyware firms, including Candiru and Intelos, as well as a little-known US-linked operator known as Dark Cartographer, track internet users and potentially infect their devices without their knowledge.
\nDiscover-Tech\u2019s operation involved purchasing advertising space on hundreds of thousands of websites and apps, using ads to collect information about users who viewed them, and making the data available to spyware companies. Those firms could then identify specific targets and potentially install spyware on their devices through malicious advertising code.
\nDespite presenting itself as a commercial operation, Discover-Tech concentrated much of its advertising spending on markets that would be of limited interest to conventional advertisers. Of 228 countries and territories examined, Palestine was the most heavily targeted, despite its population having severely limited access to Western goods and relatively little purchasing power.<\/p>\n
Read more<\/p>\n
Wired for War: The German spymaster caught in Mossad\u2019s web<\/p>\n
In more than 100 countries, Discover-Tech was the leading bidder for advertising space targeting Starlink users, according to researchers at TrendAI, a unit of Japanese cybersecurity firm Trend Micro. The company was also the largest advertising bidder in Syria, Libya, Yemen and South Sudan, and the second-largest in Afghanistan.
\nTrendAI published its findings on October 15, identifying the suspicious advertiser only by the codename Shadow-Earth-79. Six people familiar with the research subsequently told Reuters that the codename referred to Discover-Tech.
\nNoting that \u201cthe demand for legitimate Western advertising in sanctioned or active-conflict states is effectively zero,\u201d the researchers concluded that the company was running \u201ctargeting and tracking infrastructure rather than a commercial advertising operation.\u201d
\nThe findings suggest that Discover-Tech may have been attempting to identify, geolocate or monitor Starlink users. However, they do not establish that the company successfully infected Starlink users\u2019 devices with spyware.
\nWho runs Discover-Tech?
\nFounded in 2020 by Israeli entrepreneur Dekel Boni, Discover-Tech appointed Eric Banoun as its director. Banoun co-founded Circles, a surveillance company affiliated with Pegasus spyware developer NSO Group, and Senpai Technologies, a company known for developing and selling surveillance software to governments, including those of Angola, Indonesia and Malaysia.
\nBanoun also founded Intelos, which uses advertisements similar to those placed by Discover-Tech to surveil and geolocate individuals. He attempted to sell the technology to Israel\u2019s Shin Bet intelligence agency, according to Haaretz.
\nHaaretz also identified Sara Hamou, through her holding company, as a shareholder in Discover-Tech. Hamou is a former manager at Intellexa, the company that marketed Predator spyware in Greece. Earlier this year, she was sentenced to eight years in prison for her role in the Predator scandal.
\nIs Discover-Tech linked to the Israeli government?
\nIt remains unclear who purchased the services of Candiru, Intelos and Dark Cartographer after the companies obtained user data through Discover-Tech. However, as RT previously reported in its \u2018Wired for War\u2019 series, Israel treats domestically developed spyware as a controlled defense export and retains authority over where such technology may be sold.<\/p>\n
Read more<\/p>\n
Israeli officials fume over award-winning death-by-AI documentary<\/p>\n
According to a 2021 investigation by Haaretz, export licenses for Pegasus were often granted when sales were considered beneficial to Israeli foreign policy interests, including in connection with trade agreements or diplomatic support for Israel at the UN.
\nOther Israeli spy-tech companies covered in the series, including Black Cube, BlackCore and Paragon Solutions, have also been linked to activities aligned with Israeli interests, even when they were not directly contracted by the Israeli government.
\nDiscover-Tech\u2019s advertising infrastructure was used to target at least 45 devices at Al Jazeera with Candiru spyware in 2024 and 2025, according to Citizen Lab. Researchers confirmed that some devices were infected through malicious advertisements that required no interaction from users.
\nThe attacks occurred during a period of heightened tensions between Israel and the Qatar-based broadcaster, which Israeli authorities have accused of threatening national security. Candiru was founded by two Israel Defense Forces (IDF) intelligence veterans and operates under Israeli defense export controls.
\nWhile the Israeli government has not been accused of ordering Candiru to surveil Al Jazeera journalists, the targeting raises questions about whether the company\u2019s clients shared interests with the Israeli authorities. The investigations have not identified the government or client responsible for commissioning the attacks.
\nIs Discover-Tech still operating?
\nFollowing the investigations by Citizen Lab and Confiant, several major advertising companies took action against Discover-Tech. Google, Comcast-owned Beeswax and Eskimi blocked the firm from their platforms, while Vungle suspended its access pending a review. Industry association IAB Europe also suspended Discover-Tech from its list of approved vendors.
\nDiscover-Tech\u2019s website, which markets the company as a \u201ctailored digital advertising agency,\u201d remains active. The firm has not publicly responded to the findings reported by Citizen Lab, Confiant or TrendAI.<\/p>\n","protected":false},"excerpt":{"rendered":"
Discover-Tech operated a surveillance and tracking network disguised as a commercial advertising business, according to Reuters An Israeli online advertising company implicated in spyware attacks targeting internet users was heavily…<\/p>\n","protected":false},"author":1,"featured_media":40664,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[4,6,3],"tags":[],"class_list":["post-40663","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-economy","category-environment","category-politics"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t