Other products developed by Cobwebs are also concerning, as are its ties to controversial spyware vendor Quadream via Omri Timianker, who founded Cobwebs Technologies and now oversees Penlink’s international operations.
Posts by The Citizen Lab
Location data collected from apps and digital advertising can reveal habits, interests and almost any other aspect of someone's life. The misuse of consumer data raises concerns, especially when used to target vulnerable groups such as immigrants or protesters.
Webloc provides access to data on hundreds of millions of people across the globe, which is constantly harvested from the apps installed on their mobile devices. Customers can use it to monitor the movements and personal characteristics of entire populations, including their past locations.
Based on the responses to 96 freedom of information requests, we conclude that governments in Europe and the UK are highly nontransparent about their potential use of ad-based surveillance.
Webloc customers also include the national police in El Salvador and US law enforcement agencies at the federal, state, and local levels, including ICE, US military, Texas Dept. of Public Safety, and Dept of Homeland Security West Virginia.
In collaboration with @vsquare.bsky.social, we reveal that Hungarian domestic intelligence has been using Webloc since at least 2022 and continues to use it today. This represents the first confirmation of the use of ad-based surveillance tech in Europe.
vsquare.org/orban-spying...
NEW REPORT: “Uncovering Webloc: An Analysis of Penlink’s Ad-based Geolocation Surveillance Tech”
Our research confirms that ad-based surveillance tech Webloc is used by military, intelligence, and law enforcement agencies across the globe.
citizenlab.ca/research/ana...
“People will fall back to what works, and they won’t think about security in those critical moments.”
Senior researcher Ksenia Ermoshina spoke w/ the @nytimes.com about how Russians may start giving in to the limits imposed by state censorship technology.
www.nytimes.com/2026/03/31/w...
Our submission to the UN Working Group regarding the use of tech in the operations and activities of mercenaries, mercenary-related actors and private military and security companies, warns that states should stop relying on the private sector for digital operations. citizenlab.ca/wp-content/u...
The 🇺🇸 Trump administration has reportedly mooted authorizing private companies to undertake offensive cyber operations
I think that would be a very bad idea, and in my new essay for @lawfaremedia.org I say why
The Perils of Privatized Cyberwarfare www.lawfaremedia.org/article/the-...
VOLT Symposium dedicated to new book: Chilling Effects: Repression, Conformity, and Power in the Digital Age (Cambridge University Press)
Chilling Effects: Repression, Conformity, and Power in the Digital Age (Cambridge University Press) and Dan Solove quote
Last month, the Virginia Journal of Law & Technology hosted a Symposium on my new book "Chilling Effects".
Video: www.youtube.com/watch?v=0ApG...
Amazing lineup incl: @daniellecitron.bsky.social @zittrain.bsky.social @ariezra.bsky.social @natematias.bsky.social Julie Cohen, Neil Richards, & others
“The risk cuts both ways,” says senior researcher @fittarelli.com in conversation with @nytimes.com about the consequences of AI disinformation.
In this #TechFocus masterclass video, John Scott-Railton, senior researcher at @citizenlab.ca, shares practical steps that investigative journalists can take to protect sources & reduce digital risks while working on sensitive stories.
See the full @gijn.org video here: https://twp.ai/E6IA0D
He recommends that the Canadian government engage deeply with diaspora members and communities most affected by (digital) transnational repression to tailor their responses. Read more in the @theglobeandmail.com: www.theglobeandmail.com/politics/art...
In his written testimony, Deibert argues that Canadians will face a 'tsunami' of transnational repression in the coming years. citizenlab.ca/canadians-fa...
🇨🇦 Today at 3:30 pm @rondeibert.bsky.social will appear before the House of Commons Subcommittee on International Human Rights of the Standing Committee on Foreign Affairs and International Development (SDIR) to testify on transnational repression in #Canada. Watch here: t.co/ffjUCeI6BI
The Citizen Lab investigated Paragon Solutions in 2025, finding a cluster of targets in Italy: citizenlab.ca/research/a-f...
The case “raises serious questions about why no confirmation was surfaced in prior official investigations by the Italian authorities.” techcrunch.com/2026/03/05/i...
A journalist being hacked with Paragon’s ‘ethical’ spyware has “been massively inconvenient both to the Italian government and to Paragon Solutions.” www.theguardian.com/world/2026/m...
Italian prosecutors have confirmed the hacking of journalist Francesco Cancellato by Paragon spyware. Senior researcher @jsrailton.bsky.social spoke with @theguardian.com and @techcrunch.com about the case. 🧵
Senior researcher Irene Poetranto writes for @carnegieendowment.org about the Myanmar military junta’s use of internet service provider (ISP) infrastructure to surveil and censor users. Read the article: carnegieendowment.org/research/202...
“Given China’s extensive cyber espionage capabilities, there’s a much more likely way for the CCP to get access to his cellphone than filing an access to information request. And it would be far speedier too!”
@rondeibert.bsky.social in Toronto Star.
Read it here: www.thestar.com/politics/pro...
Authoritarian states use gender-based digital transnational repression to silence outspoken women in diaspora communities.
Senior researcher @noura.bsky.social with @fullerproject.org about how it affects victims.
Read the article: www.fullerproject.org/editions/rev...
"Transnational Repression in an Age of Upheaval: Global Policy Challenges for Canada"
In a policy brief for CIGI, @emiledirks.bsky.social & co-authors argue that the Canadian government must do more to protect diaspora members from #transnationalrepression.
www.cigionline.org/publications...
Senior researcher @noura.bsky.social will share her insights at OSCE's meeting on legal and institutional strategies to address gender-based violence and violence against women in the public sphere.
More info: odihr.osce.org/event/662392
BOOK LAUNCH: Join the Citizen Lab’s @penney.bsky.social @rondeibert.bsky.social, and Kate Robertson as they discuss Penney’s new book, "Chilling Effects: Repression, Conformity, and Power in the Digital Age."
🕠 March 12, 5:30 pm
✅ RSVP: machformext.osgoode.yorku.ca/machform/vie...
Join senior researcher Irene Poetranto on March 13 for “Moving Beyond the Given: The Politics of Categories and Subjectivity in Indonesia” at @asianstudies.org Annual Conference in Vancouver. #AAS2026
Get details: www.asianstudies.org/conference/r...
MARCH 10: Get practical safety tips from the Citizen Lab's Rebekah Brown at @accessnow.org's Digital Security Helpline webinar on preventing spear-phishing attacks against civil society.
Register: www.accessnow.org/event/digita...
On March 10, Citizen Lab's Kate Robertson will share her expertise and insights at @osgoode.bsky.social course on AI and criminal justice in Canada. Register: osgoodepd.ca/professional...
The Austrian Ministry of the Interior bought social media surveillance software 'Tangles' from Cobwebs/Penlink and refuses to tell parliament whether they also bought the intrusive Tangles add-on 'Webloc', which relies on the mass collection of personal data from digital advertising and mobile apps.