Researchers Details the Licensing Model of Predator Spyware

A recent analysis of the sophisticated commercial spyware, Predator, reveals that its ability to persist between reboots is offered as an “add-on-feature” and is dependent upon the license options selected by the user, according to a recent analysis.

Predator is the result of a collaboration known as the Intellexa Alliance, which also comprises Senpai Technologies, Nexa Technologies, and Cytrox (later bought by WiSpear). In July 2023, the United States put Cytrox and Intellexa on its Entity List due to their “trafficking in cyber exploits used to gain access to information systems.”

In regards to the issue, Cisco Talos researchers Mike Gentile, Asheer Malhotra, and Vitor Ventura said in a report, “In 2021, Predator spyware couldn’t survive a reboot on the infected Android system (it had it on iOS[…]However, by April 2022, that capability was being offered to their customers.”

The cybersecurity vendor first revealed the inner workings of Predator and its harmonic connection with another loader component named Alien more than six months ago. 

“Alien is crucial to Predator’s successful functioning, including the additional components loaded by Predator on demand[…]The relationship between Alien and Predator is extremely symbiotic, requiring them to continuously work in tandem to spy on victims,” Malhotra told cybersecurity firm This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents

Read the original article:

Researchers Details the Licensing Model of Predator Spyware