Predator spyware resurfaces with signs of activity, Recorded Future says
ID: e98c1f39-cbc2-5c08-84fb-cdb3b545cfd7
STIX ID: report--e98c1f39-cbc2-5c08-84fb-cdb3b545cfd7
Feed Name: CyberScoop
Threat Score
Recorded Future's Insikt Group observed renewed Predator spyware activity: new domains and infrastructure forming four clusters likely tied to customers in Angola, Saudi Arabia, the DRC, and possibly Madagascar/UAE. Operators appear to have modified some higher-tier infrastructure after sanctions and publicity but continue operations and often reuse prior assets; historical Predator targets include high-value officials such as members of the U.S. Congress and U.N. personnel.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
