Predator Still Active, with New Client and Corporate Links Identified

Insikt Group reports that Predator mercenary spyware remains active despite public exposure and sanctions, identifying new victim-facing and high-tier infrastructure, evolving evasion tactics, and a newly observed suspected customer in Mozambique; the analysis also links parts of Predator’s multi-tier C2 network to a Czech entity (FoxITech s.r.o.), provides domains and IP indicators, and reiterates defensive recommendations such as device separation, updates, reboots, lockdown mode, and MDM deployment.