Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Reply to @wchr@mastodon.social
Wolfie Christl@wchr@mastodon.social (2026-10-16 00:34:42)
In addition to actual infections, we found 4 billion ad bidding records from Discover-Tech's MyDSP system.

From March to June 2026, hundreds of millions of their ads were shown to users of almost 200k different websites and apps.

Millions of people were at least subject to profiling, if not worse.

This includes users within IP networks of NATO, UN, EU institutions and a wide range of organizations in many countries including in defense, government, critical infrastructure, industry and media.
---Attachments---
image: https://files.mastodon.social/media_attachments/files/117/445/652/914/240/283/original/f5effc74471d1366.png

---Reply---
Wolfie Christl@wchr@mastodon.social (2026-10-16 04:04:06)
In addition ad-based spyware from Candiru (now 'Integrity Labs'), we found that Discover-Tech is linked to additional surveillance firms including mercenary spyware vendor Bindecy and ADINT vendor Intelos.

We'll publish a follow-up report on another threat actor we call DARK CARTOGRAPHER that uses Discover tech ads to exploit vulnerabilities across mobile carriers in 30 countries to link device/ad IDs with phone numbers. This actor is linked to additional ADINT firms and a US govt contractor.
Reply 
---Replies---
Wolfie Christl@wchr@mastodon.social (2026-10-16 04:13:41)
There's a lot of detail in our report, Controlium screenshots, tracking and ID syncing, Discover-Tech's corporate network, the history of its advertising tech, including odd stuff that may justify another investigation.

On a side note, part of what we found relied on Discover-Tech's own hilariously bad security.

A lot of information was publicly accessible without any authentication requirement, including ad bidding logs, source code for admin panels, ad encryption tools and even user logins.
---Attachments---
image: https://files.mastodon.social/media_attachments/files/117/446/504/039/938/942/original/ef972d9427a3105d.png
image: https://files.mastodon.social/media_attachments/files/117/446/503/876/942/167/original/7a42e08e1993c3fc.png