Intellexa remotely accessed Predator spyware customer systems, investigation finds

Leaked training videos and multi-source investigations allege that Intellexa’s Predator spyware retained remote-access capability to customer systems, used malicious mobile ads (named “Aladdin”) and zero‑day browser exploits to infect targets, and was actively deployed against activists, journalists and lawyers across multiple countries; research from Google, Recorded Future and Amnesty highlights operational ties, spoofed domains, and ongoing Predator activity despite sanctions.