logo

Predator Spyware Infrastructure Returns Following Exposure and Sanctions

ID: 5df19529-0326-5ccb-87d4-231e11d7f8b0

STIX ID: report--5df19529-0326-5ccb-87d4-231e11d7f8b0

Feed Name: Recorded Future Blog

Threat Score
75/100

Date Published: 2024-09-05

Date Updated: 2026-04-28

...
...

Insikt Group reports that Predator spyware infrastructure has resurfaced with new anonymizing tiers and evasion techniques, enabling continued targeting of high-value individuals (politicians, executives, journalists) in countries including the DRC and Angola; the report includes domains and IPs as IOCs, ATT&CK technique mappings, and recommended defenses such as regular updates, device reboots, lockdown mode, MDM, and security training.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.