Predator Spyware Operators Rebuild Multi-Tier Infrastructure to Target Mobile Devices

Recorded Future’s Insikt Group identifies a newly discovered multi-tiered delivery infrastructure for Predator spyware (developed by Cytrox and managed by the Intellexa Alliance) in use across at least eleven countries. The report highlights Predator’s continued operations after prior disclosures, frequent abuse against journalists, politicians, and activists, privacy and safety risks from mercenary spyware, and recommends mitigations such as patching, device management, and policy/regulatory responses.