The US government has sanctioned Intellexa Consortium, the company which developed and sold the notorious Predator spyware.
The group consists of Intellexa S.A. (Greece), Intellexa Limited (Ireland), Cytrox AD (North Macedonia), Cytrox Holdings ZRT (Hungary), and Thalestris Limited (Ireland).
Among the sanctioned individuals are Tal Jonathan Dilian, the group’s founder, as well as Sara Aleksandra Fayssal Hamou, a corporate offshoring specialist providing managerial services.
Targeting Americans
Commercial malware is usually sold to government agencies around the world, who use it to target political opponents, journalists, human rights activists, and dissidents, the Treasury Department reported.
In late May 2023, researchers analyzed a sample of the malware, and discovered that it can record audio from phone calls and VoIP apps, and steal data from chat apps such as WhatsApp or Telegram. Although not confirmed, the researchers believe the malware also allows for geolocation tracking, access to camera apps, and tricking the user into thinking the device is powered off (for easier use during the “off” time).
The researchers also said that the list of features is not conclusive and that Predator could be capable of a lot more. The Department of Treasury sanctioned the group mostly because, as it said in the press release, Predator was used to target US government officials, journalists, and activists.
The sanctions mean all assets belonging to both designated individuals, and companies, are blocked, and must be reported to the Department of Treasury’s Office of Foreign Assets Control (OFAC). Furthermore, US citizens and companies are not allowed to transact, or do business with, the blacklisted organizations.