logo

Predator Spyware Operators Rebuild Multi-Tier Infrastructure to Target Mobile Devices

ID: b56dc145-0f55-5b2b-9c8f-eac7af3ea475

STIX ID: report--b56dc145-0f55-5b2b-9c8f-eac7af3ea475

Feed Name: Recorded Future Blog

Threat Score
75/100

Date Published: 2024-03-01

Date Updated: 2026-04-28

...
...

Recorded Future’s Insikt Group reports discovery of a new multi-tiered delivery infrastructure for Predator, a mercenary mobile spyware developed by Cytrox and managed by the Intellexa Alliance, with activity attributed to at least eleven countries (including first-time public identification of customers in Botswana and the Philippines). The analysis notes Predator’s ongoing use despite prior public disclosures, frequent abuse against journalists, politicians, and activists, and recommends mitigation measures such as device updates, Mobile Device Management, lockdown modes, and separation of personal and corporate devices.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.