Citizen Lab Exposes Law Enforcement’s Use of Webloc to Monitor 500 Million Devices via Advertising Data
Recent investigations have revealed that various law enforcement agencies, including Hungarian domestic intelligence, the national police in El Salvador, and multiple police departments across the United States, have extensively utilized an advertising-based geolocation surveillance system known as Webloc. This development raises significant concerns regarding privacy and surveillance practices on a global scale.
The Development of Webloc
Webloc was originally developed by the Israeli company Cobwebs Technologies and is now marketed by its successor, Penlink, following their merger in July 2023. Established in 1986, Penlink specializes in providing “mission-critical communications and digital evidence collection and analysis software” to law enforcement agencies worldwide. The merger is aimed at enhancing their digital investigative capabilities.
According to a report from Citizen Lab, U.S. clients of Webloc include prominent agencies such as Immigration and Customs Enforcement (ICE), the U.S. military, and the Texas Department of Public Safety, along with various police departments in major cities like Los Angeles and Dallas, as well as smaller jurisdictions.
Functionality and Reach of Webloc
Webloc is marketed as an add-on to the social media and web intelligence system Tangles. It provides access to a continuously updated stream of data from approximately 500 million mobile devices globally. This data includes device identifiers, location coordinates, and profile information harvested from mobile applications and digital advertising.
The system’s capabilities allow users to monitor the locations, movements, and personal characteristics of entire populations, with historical data available for up to three years. Penlink’s website states that Webloc can be utilized for “investigating and interpreting location-based data to support your cases.” Additionally, it can infer locations from IP addresses and identify individuals by gathering their home and work addresses.
Implications of Advertising-Based Surveillance
The surveillance system operates by leveraging data purchased from mobile apps and digital advertising, enabling the analysis of behaviors and movements of vast populations. Cobwebs Technologies initially announced the platform in October 2020, promoting it as a “cutting-edge location intelligence platform” that integrates web data with geospatial data points.
The implications of such technology are profound. Reports indicate that Webloc can be used to track individuals without a warrant, raising serious questions about privacy rights and the potential for abuse. A procurement notice highlighted the tool’s ability to automate and continuously monitor unique mobile advertising IDs and geolocated IP addresses.
Controversies and Ethical Concerns
Cobwebs Technologies has faced scrutiny in the past. In December 2021, it was among seven cyber mercenaries deplatformed by Meta for operating numerous accounts aimed at conducting reconnaissance and engaging in social engineering tactics. This included attempts to infiltrate closed communities to extract personal information.
Meta’s findings revealed that Cobwebs Technologies had customers in various countries, including Bangladesh, Hong Kong, and Poland. The company was implicated in targeting not only law enforcement activities but also activists and opposition politicians, particularly in regions like Hong Kong and Mexico.
Links to Israeli Spyware and Broader Surveillance Networks
Investigations into Cobwebs Technologies have uncovered connections to Israeli spyware vendor Quadream. Omri Timianker, the founder and former president of Cobwebs, now oversees Penlink’s international operations. The company is suspected of having ceased operations in 2023.
As many as 219 active servers associated with Cobwebs product deployments have been identified, primarily located in the U.S. and several other countries. This extensive network raises concerns about the global reach and potential misuse of surveillance technologies.
Penlink has responded to these findings, asserting that the information appears to be based on inaccuracies or misunderstandings regarding their operational practices post-acquisition of Cobwebs Technologies. The company claims compliance with U.S. state privacy laws.
For ongoing coverage and breaking updates, visit our Latest News section.
Published on 2026-04-11 20:45:00 • By the Editorial Desk
