Predator Spyware Resurfaces with Advanced Features, Increased Anonymity

The infamous Predator commercial spyware has returned with a set of dangerous new upgrades, following a period of reduced activity earlier this year. Cybersecurity experts at Insikt Group, a division of Recorded Future, have reported new Predator infrastructure surfacing in countries like the Democratic Republic of the Congo and Angola. Despite US sanctions imposed on Intellexa, the company behind Predator, the spyware is far from disappearing.

After the initial crackdown, Predator saw a decrease in activity. However, recent reports indicate the spyware has not only returned but has become even more difficult to track. Similar to other notorious spyware like Pegasus, Predator gives governments the ability to access private data, track locations, activate cameras, and monitor communications without users’ knowledge.

The latest upgrades to Predator add more layers of anonymity, making it harder for researchers and cybersecurity teams to detect and trace its operations. According to Insikt’s report, the updated Predator anonymizes customer actions and complicates efforts to track its spread.

"The recent changes make it significantly harder for cybersecurity professionals to monitor Predator's activity," Insikt Group's researchers stated. "Adopting strong cybersecurity practices such as device updates, utilizing lockdown modes, and deploying mobile device management systems are crucial for defense."

These new features place even greater emphasis on staying vigilant and employing comprehensive security measures to mitigate the risks posed by Predator. The spyware's resurgence also highlights a growing threat landscape where even sophisticated protections can be bypassed.

In light of these developments, Insikt Group advises users and organizations to follow cybersecurity best practices, such as keeping devices up to date and implementing mobile device management systems, which can help guard against invasive spyware like Predator.

Although Predator is mainly linked to governmental spying, its renewed presence is a reminder that advanced spyware can potentially be leveraged by various malicious actors, including cybercriminals. To combat this, individuals and organizations should take immediate action to bolster their cybersecurity defenses.