Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spywareCisco Talos·May 25, 12:02 UTC · May 25, 2023MalwareCVE-2021-37973CVE-2021-37976CVE-2021-38000+2 CVEs60
Predator Spyware Infrastructure Resurfaces Post-SanctionsRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Malware in the wild60
Predator spyware endures even after widespread exposure, analysis showsCyberScoop·Mar 1, 15:22 UTC · Mar 1, 2024Malware in the wild60
Intellexa’s Predator spyware infected Angolan journalist’s device, Amnesty reportsSecurity Affairs·Feb 19, 08:17 UTC · Feb 19, 2026Malware55
Experts analyzed the PREDATOR spyware and its loader AlienSecurity Affairs·May 29, 12:57 UTC · May 29, 2023Malware55
Predator Android Spyware: Researchers Uncover New Data Theft CapabilitiesThe Hacker News·May 31, 04:21 UTC · May 31, 2023Malware55
Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware DeliveryThe Hacker News·Dec 9, 07:34 UTC · Dec 9, 2025MalwareCVE-2025-48543CVE-2025-6554CVE-2023-41993+12 CVEs160
US sanctions Predator spyware makers for targeting gov’t officialsThe Record·Mar 5, 15:50 UTC · Mar 5, 2024Malware55
Sanctioned and exposed, Predator spyware maker group has gone awfully quietCyberScoop·Jul 1, 10:00 UTC · Jul 1, 2024Malware55
Predator spyware demonstrates troubleshooting, researcherCyberScoop·Jan 14, 18:16 UTC · Jan 14, 2026Malware55
Experts Detail Multi-Million Dollar Licensing Model of Predator SpywareThe Hacker News·Dec 29, 10:17 UTC · Dec 29, 2023Malware55
Predator Spyware Linked to Madagascar’s Government Ahead of ElectionInfosecurity Magazine·Oct 3, 14:30 UTC · Oct 3, 2023MalwareCVE-2023-41991CVE-2023-41992CVE-2023-4199360
Citizen Lab Finds Cellebrite Tool Used on Kenyan Activist’s Phone in Police CustodyThe Hacker News·Feb 21, 04:46 UTC · Feb 21, 2026Malware55
Predator bots are exploiting APIs at scale. Here’s how defenders must respond.CyberScoop·Jan 20, 11:00 UTC · Jan 20, 2026Exploit / PoC in the wild60
Predator Spyware Maker Intellexa Evades SanctionsInfosecurity Magazine·Dec 5, 09:15 UTC · Dec 5, 2025Malware55
Predator spyware resurfaces with signs of activity, Recorded Future saysCyberScoop·Sep 5, 14:00 UTC · Sep 5, 2024Malware in the wild60
Predator spyware infrastructure taken down after exposureCyberScoop·Mar 4, 19:46 UTC · Mar 4, 2024Malware in the wild60
Intellexa remotely accessed Predator spyware customer systems, investigation findsCyberScoop·Dec 4, 22:24 UTC · Dec 4, 2025Malware in the wild60
Predator spyware activity surfaces in new places with new tricksCyberScoop·Jun 12, 18:58 UTC · Jun 12, 2025Malware in the wild160
U.S. sanctions maker of Predator spywareCyberScoop·Mar 5, 15:41 UTC · Mar 5, 2024Malware in the wild60
Egyptian opposition politician hacked with Predator spyware, researchers confirmThe Record·Sep 22, 20:31 UTC · Sep 22, 2023Malware55
Cytrox's Predator spyware used zeroSecurity Affairs·May 29, 10:13 UTC · May 29, 2023MalwareCVE-2021-37973CVE-2021-37976CVE-2021-38000+2 CVEs160
US Sanctions Predator Spyware Maker IntellexaInfosecurity Magazine·Mar 6, 10:00 UTC · Mar 6, 2024Malware in the wild60
Treasury hits Predator spyware makers with more sanctionsCyberScoop·Sep 16, 16:47 UTC · Sep 16, 2024Malware in the wild60
Intellexa and Cytrox: From fixer-upper to Intel AgencyCisco Talos·Dec 21, 16:00 UTC · Dec 21, 2023Exploit / PoC60
3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhoneArs Technica · Security·Sep 23, 00:23 UTC · Sep 23, 2023VulnerabilityCVE-2023-41993CVE-2023-41991CVE-2023-41992+1 CVEs60
Cytrox's Predator Spyware Targeted Android Users with ZeroThe Hacker News·May 21, 03:11 UTC · May 21, 2022MalwareCVE-2021-37973CVE-2021-37976CVE-2021-38000+2 CVEs60
New Apple Zero-Days Exploited to Target Egyptian exThe Hacker News·Sep 26, 11:42 UTC · Sep 26, 2023Exploit / PoCCVE-2023-41991CVE-2023-41992CVE-2023-41993+1 CVEs60
Combat Online Predators Act Clears US HouseInfosecurity Magazine·Dec 14, 17:53 UTC · Dec 14, 2020Policy & legal55
Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon SpywareThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware in the wildCVE-2025-43200CVE-2025-2420060
U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsAppThe Hacker News·Mar 5, 15:54 UTC · Mar 5, 2024MalwareCVE-2019-356860
Signal Debunks Zero-Day Vulnerability Reports, Finds No EvidenceThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2023Exploit / PoC60
U.S. Gov imposed Visa restrictions on 13 individuals linked to commercial spyware activitySecurity Affairs·Apr 23, 07:49 UTC · Apr 23, 2024Malware55
Global Coalition and Tech Giants Unite Against Commercial Spyware AbuseThe Hacker News·Feb 8, 03:08 UTC · Feb 8, 2024MalwareCVE-2023-28205CVE-2023-28206CVE-2023-32409+16 CVEs160
U.S. Gov imposes visa restrictions on individuals misusing Commercial SpywareSecurity Affairs·Feb 6, 10:52 UTC · Feb 6, 2024Malware55
US Gov adds surveillance firms Cytrox and Intellexa to Entity List for trafficking in cyber exploitsSecurity Affairs·Jul 19, 13:24 UTC · Jul 19, 2023Exploit / PoC60
If consequences matter, they should apply to vendors, tooCyberScoop·Mar 11, 10:00 UTC · Mar 11, 2026Ransomware in the wild60