The spyware’s developer, Intellexa, has been under pressure due to sanctions and public disclosure, but Recorded Future uncovered fresh activity.

It’s another swipe at the Intellexa Consortium, a sprawling network of companies.

Sanctions and public exposure might have driven Intellexa into silence for months, but that doesn’t mean its Predator spyware is gone for good.

The attack campaigns show how spyware tech companies have become more akin to nation-state threat actors.

Sanctions, newspaper investigations and reports exposing the Intellexa alliance’s infrastructure all might have led to its diminished state.

The Biden administration sanctions individuals and entities behind the commercial surveillance tool implicated in human rights abuses.

For the second time in six months, the operators of the Predator spyware burned down their infrastructure after it was publicly documented.

The operators of the Predator spyware rebuilt their infrastructure and operate in at least 11 countries after being exposed last year.