logo

Predator spyware resurfaces with signs of activity, Recorded Future says

ID: e98c1f39-cbc2-5c08-84fb-cdb3b545cfd7

STIX ID: report--e98c1f39-cbc2-5c08-84fb-cdb3b545cfd7

Feed Name: CyberScoop

Threat Score
80/100

Date Published: 2024-09-05

Date Updated: 2026-04-21

Author: Tim Starks

...
...

Recorded Future's Insikt Group observed renewed Predator spyware activity: new domains and infrastructure forming four clusters likely tied to customers in Angola, Saudi Arabia, the DRC, and possibly Madagascar/UAE. Operators appear to have modified some higher-tier infrastructure after sanctions and publicity but continue operations and often reuse prior assets; historical Predator targets include high-value officials such as members of the U.S. Congress and U.N. personnel.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.