Leaks show Intellexa burning zero-days to keep Predator spyware running

The report describes Intellexa's Predator spyware operations: a mercenary vendor that purchases and burns zero-day vulnerabilities (including multiple mobile/browser zero-days) to perform targeted, zero-click infections via one-time links and malicious advertising (‘Aladdin’). Independent reviews of leaked internal records and public analysis by Google TAG and Amnesty/CitizenLab confirm active exploitation in the wild and document techniques, scale, and mitigation advice such as using ad blockers, keeping software updated, and running real-time anti-malware.