Netskope Threat Labs

Predator

ATP Sandbox Adv. Heuristics

Predator is an Android and iOS spyware sold by commercial surveillance vendors to government clients, and its campaigns have targeted journalists, activists, and political figures. Its Android component pairs with network level implants to capture messages, calls, and credentials, and its operators deploy it through phishing links and zero click chains. The market for such mercenary tooling has drawn international scrutiny and sanctions, and its detections warrant immediate incident response.

First seen
May 2022
Last seen
October 2026
Alert Name
Binary.Trojan.Predator
ByteCode-MSIL.Trojan.Predator
Document-Word.Trojan.Predator
DOS.Trojan.Predator
Email-MSG.Trojan.Predator
Script-AutoIt.Trojan.Predator
Script-JS.Trojan.Predator
Win32.Infostealer.Predator
Win32.Trojan.Predator