Active Lycantrox infrastructure illumination

SEKOIA.io analyzes the use of Cytrox's Predator spyware to target iOS devices via a zero-day exploit chain, maps an associated VPS- and domain-based infrastructure tied to the Lycantrox intrusion set, lists high-confidence and moderate-confidence domain IoCs, and provides country-level attribution hypotheses (Madagascar, Indonesia, Kazakhstan, Angola) while advising defenders and at-risk individuals to check devices.