Predator Spyware & Intellexa: C2 Infrastructure & Targeted Countries Analysis

Sekoia.io reports that Predator (Intellexa) spyware infrastructure remains active after prior public disclosures: analysts discovered new malicious domains and infrastructure linked to multiple countries (including Angola, Madagascar, Indonesia, Kazakhstan, Egypt and newly observed Botswana, Mongolia, Sudan). The report highlights a shift toward more generic, plausible-deniability domains by suspected customers, provides country-level assessments and indicators, and urges NGOs to share IOCs for further collaboration.