Citizen Lab reveals law enforcement using Webloc to track up to 500M mobile devices using advertising data and geolocation records.
Researchers from the Citizen Lab have revealed that law enforcement agencies worldwide are using a surveillance tool capable of tracking the movements of hundreds of millions of mobile devices through advertising data.
The platform, known as Webloc, gathers geolocation information collected from mobile apps and digital advertising networks. According to the report, the system provides access to location records and device identifiers linked to as many as 500 million devices globally.
The technology was originally developed by Israeli firm Cobwebs Technologies and is now distributed by Penlink, a company that provides digital intelligence and communications analysis tools to law enforcement agencies.
Webloc relies on the extensive ecosystem of mobile advertising data. Apps and advertising networks collect information such as device identifiers, location coordinates, and behavioral data, which are then aggregated and sold through data brokers.
Citizen Lab researchers say Webloc integrates these data streams into a system that allows investigators to:
- Track device movements over time
- Link devices to home and work locations
- Identify individuals behind device identifiers
- Analyze movement patterns over periods of up to three years
The tool essentially converts advertising data into a global surveillance platform capable of mapping real-world movements.
The report links Webloc to multiple government and law enforcement agencies.
In the United States, reported users include:
- Immigration and Customs Enforcement (ICE)
- The U.S. military
- Texas Department of Public Safety
- Local police departments in cities including Los Angeles, Dallas, Baltimore, and Tucson
Citizen Lab also identified deployments connected to agencies in countries such as Hungary and El Salvador.
Researchers warn that the system may enable warrantless mass surveillance, since the data originates from commercial advertising networks rather than traditional telecom interception.
By purchasing or accessing advertising-derived location data, authorities may be able to track individuals without obtaining a court order, raising significant legal and privacy concerns.
“Our research shows that intrusive and legally questionable ad-based surveillance is being used by military, intelligence, and law enforcement agencies,” Citizen Lab said in its findings.
Penlink responded to the report by disputing parts of the analysis, stating that the findings rely on misunderstandings about its operations and that the company complies with applicable privacy laws.
The company acquired Cobwebs Technologies in 2023, integrating its intelligence capabilities into Penlink’s digital investigation tools.
The revelations highlight the rapidly expanding commercial spyware and surveillance technology market, where tools originally designed for marketing analytics are increasingly being repurposed for intelligence and law enforcement use.
Privacy advocates warn that the widespread availability of such data could enable governments to monitor large populations without traditional oversight mechanisms.
Reports are sourced from official documents, law-enforcement updates, and credible investigations.
Discover additional reports, market trends, crime analysis and Harm Reduction articles on DarkDotWeb to stay informed about the latest dark web operations.
