Inside Intellexa: The Corporate Web Behind Cytrox Predator Spyware

One of the most common mistakes in reporting on this space is treating Intellexa, Cytrox and Predator as interchangeable names. They are not. In my research for Predator Spyware Intelligence, I have found that the corporate structure is deliberately layered across jurisdictions, and untangling it is essential for accurate attribution.

Cytrox is the original developer of Predator spyware, established in North Macedonia. Cytrox AD and an earlier entity, Cytrox Holdings ZRT in Hungary, were both added to the U.S. Commerce Entity List in July 2023. According to Citizen Lab and Atlantic Council reporting, Cytrox was acquired by WiSpear in 2018, and Tal Dilian began organizing what became the Intellexa consortium around that time.

Intellexa itself is described differently across sources: as a group, a consortium, and an alliance. That ambiguity is real. Intellexa S.A. in Greece and Intellexa Limited in Ireland were the principal sales and development channels. Thalestris Limited held distribution rights. Aliada Group Inc. in the British Virgin Islands was designated by OFAC in September 2024 for enabling tens of millions of dollars in transactions. WiSpear, Senpai Technologies and Nexa Technologies round out the alliance layer.

Why does this matter for the Cytrox Predator spyware Intellexa keyword cluster? Because the accurate formulation is not 'Intellexa created Predator.' The accurate formulation, which I use throughout this site, is that Predator was originally developed by Cytrox and later marketed and developed within the broader Intellexa ecosystem. The corporate relationships evolved across multiple jurisdictions, and researchers describe an ecosystem rather than a single company.

Recorded Future Insikt's December 2025 report on Intellexa's global corporate web traced successor-network activity into 2025 and 2026, including Czech-linked firms and intermediaries in Greece. The sanctions delistings of December 2025 removed three individuals but left the corporate entities listed. For anyone tracking Cytrox Predator spyware, understanding this structure is the difference between accurate attribution and conflation.