{"id":5277,"date":"2026-04-11T18:48:37","date_gmt":"2026-04-11T18:48:37","guid":{"rendered":"https:\/\/delimiter.online\/blog\/webloc-geolocation-surveillance\/"},"modified":"2026-04-11T18:48:37","modified_gmt":"2026-04-11T18:48:37","slug":"webloc-geolocation-surveillance","status":"publish","type":"post","link":"https:\/\/delimiter.online\/blog\/webloc-geolocation-surveillance\/","title":{"rendered":"Law Enforcement Used Webloc Tool to Track 500 Million Devices"},"content":{"rendered":"<p><a href=\"https:\/\/delimiter.online\/blog\/smart-slider-3-backdoor\/\" title=\"law enforcement\">law enforcement<\/a> agencies in multiple countries have used a global geolocation <a href=\"https:\/\/delimiter.online\/blog\/hack-for-hire-campaign\/\" title=\"surveillance\">surveillance<\/a> system that leverages advertising data to track approximately 500 million devices. The tool, known as Webloc, was developed by the Israeli company Cobwebs Technologies and is now sold by its successor, Penlink, following a merger in July 2023.<\/p>\n<h2>Attribution and Agency Use<\/h2>\n<p>According to research from the University of Toronto&#8217;s Citizen Lab, the Hungarian domestic intelligence service, the national police of El Salvador, and several unspecified U.S. law enforcement and police departments have been attributed to the use of Webloc. The system operates by collecting and analyzing location data generated through mobile advertising networks.<\/p>\n<p>This form of surveillance capitalizes on the vast amounts of precise location information routinely gathered by apps on smartphones and other mobile devices. The data is often collected for targeted advertising purposes but can be repurposed for law enforcement and intelligence tracking.<\/p>\n<h2>Technical Operation and Corporate History<\/h2>\n<p>Webloc functions as an advertising-based geolocation surveillance platform. It aggregates and processes location data points from the digital advertising ecosystem, allowing operators to map the movements of devices over time. The tool can create detailed profiles of individuals&#8217; whereabouts and routines.<\/p>\n<p>Cobwebs Technologies, the original developer, specialized in open-source intelligence and web intelligence solutions. The company merged with U.S.-based Penlink, a provider of lawfully authorized interception analysis software, in the summer of 2023. Penlink now markets and sells the Webloc system to government clients.<\/p>\n<h2>Legal and Privacy Implications<\/h2>\n<p>The use of commercially available location data for surveillance bypasses traditional legal processes like warrants for cell-site location information. Agencies can purchase access to large datasets without directly compelling technology companies to hand over user information.<\/p>\n<p>Privacy advocates and researchers have long warned about the national security and civil liberty threats posed by the unchecked sale of location data. The scale of the tracking, involving half a billion devices, highlights the pervasive nature of location data collection in the modern digital economy.<\/p>\n<p>Such practices raise significant questions about proportionality, oversight, and the right to privacy in public spaces. The involvement of agencies in both democratic and non-democratic nations underscores the global market for advanced surveillance tools.<\/p>\n<h2>Industry Context and Scrutiny<\/h2>\n<p>The surveillance-for-hire industry, where private companies develop and sell sophisticated monitoring tools to governments, has faced increasing international scrutiny. Reports from groups like Citizen Lab have repeatedly exposed how these tools are used to target journalists, activists, and political opponents.<\/p>\n<p>While tools like Webloc are often marketed for legitimate law enforcement purposes, such as tracking criminals or finding missing persons, the lack of transparency and public accountability surrounding their use remains a central concern. The data supply chain, from app developers to data brokers to surveillance vendors, is complex and largely opaque to the public.<\/p>\n<h2>Expected Developments and Next Steps<\/h2>\n<p>Increased public and legislative attention to data broker practices may lead to stricter regulations on the sale of location data in key markets like the United States and the European Union. Lawmakers are expected to continue examining the legal frameworks governing law enforcement access to commercial data streams.<\/p>\n<p>Further investigative reporting and academic research will likely reveal additional agencies and companies involved in the trade of location data for surveillance. The merger between Cobwebs and Penlink suggests ongoing consolidation in the surveillance technology sector, as firms seek to offer integrated intelligence platforms to government clients worldwide.<\/p>\n<p>Source: Citizen Lab<\/p>\n","protected":false},"excerpt":{"rendered":"<p>law enforcement agencies in multiple countries have used a global geolocation surveillance system that leverages advertising data to track approximately 500 million devices. The tool, known as Webloc, was developed by the Israeli company Cobwebs Technologies and is now sold by its successor, Penlink, following a merger in July 2023. Attribution and Agency Use According [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":5278,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[505],"tags":[6282,253,6281,884,2788],"class_list":["post-5277","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-advertising-technology","tag-data-privacy","tag-geolocation-tracking","tag-law-enforcement","tag-surveillance"],"_links":{"self":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/posts\/5277","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/comments?post=5277"}],"version-history":[{"count":0,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/posts\/5277\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/media\/5278"}],"wp:attachment":[{"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/media?parent=5277"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/categories?post=5277"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/delimiter.online\/blog\/wp-json\/wp\/v2\/tags?post=5277"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}