Cytrox Predator Spyware & Intellexa Research Blog
Offensive cybersecurity analysis of Cytrox Predator spyware and the Intellexa commercial surveillance ecosystem, written by the Predator Spyware Intelligence research team. Each post targets the Cytrox Predator spyware Intellexa knowledge cluster and is sourced to primary research from Citizen Lab, Google TAG, Cisco Talos and Amnesty International.
Cytrox Predator Spyware: A Technical Deep Dive Into the Intellexa Implant Architecture
Cytrox Predator spyware is a commercial mobile surveillance implant developed by Cytrox and marketed through the Intellexa ecosystem. This Predator Spyware Intelligence analysis breaks down its delivery, privilege-escalation, implant and command-and-control layers as documented by Cisco Talos and Google TAG.
Inside Intellexa: The Corporate Web Behind Cytrox Predator Spyware
Intellexa is not a single company but a cross-jurisdictional commercial surveillance ecosystem that marketed Cytrox Predator spyware. This Predator Spyware Intelligence investigation maps the entities across Greece, Ireland, Israel and North Macedonia and explains why conflation causes reporting errors.
Cytrox Predator and Intellexa Zero-Days: Tracking 15 Vulnerabilities Google Attributed
Google has associated Intellexa activity with 15 unique zero-day vulnerabilities since 2021. This Predator Spyware Intelligence tracker catalogs every Cytrox Predator-related CVE by platform, product, role and patch status, all confirmed patched.
How Cytrox Predator Spyware Compromises iOS: The 2023 'smack' Exploit Chain
The 2023 'smack' iOS exploit chain delivered Cytrox Predator spyware to Egyptian targets via CVE-2023-41993, CVE-2023-41991 and CVE-2023-41992. This Predator Spyware Intelligence analysis reconstructs the chain from Google GTIG and Citizen Lab research.
Intellexa Aladdin: How Advertising-Based Delivery Changed Cytrox Predator Spyware
Intellexa Aladdin is an advertising-based infection mechanism revealed in the 2025 Intellexa Leaks that can deliver Cytrox Predator spyware without a click. This Predator Spyware Intelligence analysis explains the offensive implications.
Cytrox Predator vs NSO Pegasus: A Forensic Comparison of Mercenary Spyware
Cytrox Predator and NSO Pegasus are the two most documented commercial spyware families. This Predator Spyware Intelligence comparison breaks down the vendors, architectures, exploit inventories and operational histories without overstating superiority.
The Intellexa Leaks of 2025: What Amnesty Revealed About Cytrox Predator Spyware
Amnesty International's December 2025 'To Catch a Predator' investigation analyzed leaked Intellexa internal documents, sales material and training videos. This Predator Spyware Intelligence analysis summarizes what the leaks revealed about Cytrox Predator spyware.
Detecting Cytrox Predator Spyware: Forensic Indicators and IOC Analysis
Detecting Cytrox Predator spyware requires forensic tooling, not antivirus. This Predator Spyware Intelligence guide covers published iOS and Android indicators of compromise, MVT methodology and the limits of self-diagnosis.
Intellexa Sanctions: How the U.S. Cracked Down on Cytrox Predator Spyware
The U.S. added Intellexa and Cytrox entities to the Commerce Entity List in 2023 and issued OFAC sanctions in 2024. This Predator Spyware Intelligence tracker documents the designations, the December 2025 delistings and what remains listed.
Cytrox Predator Spyware Victims: Documented Cases Across Egypt, Greece and Angola
Cytrox Predator spyware has been documented against journalists and politicians in Egypt, Greece, Angola and Pakistan. This Predator Spyware Intelligence analysis records the confirmed cases and the confidence levels behind each attribution.
