Predator Spyware Infrastructure Returns Following Exposure and Sanctions
ID: 5df19529-0326-5ccb-87d4-231e11d7f8b0
STIX ID: report--5df19529-0326-5ccb-87d4-231e11d7f8b0
Feed Name: Recorded Future Blog
Threat Score
Insikt Group reports that Predator spyware infrastructure has resurfaced with new anonymizing tiers and evasion techniques, enabling continued targeting of high-value individuals (politicians, executives, journalists) in countries including the DRC and Angola; the report includes domains and IPs as IOCs, ATT&CK technique mappings, and recommended defenses such as regular updates, device reboots, lockdown mode, MDM, and security training.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
