← All actors Recent activity

PREDATOR

PREDATOR · CVE-2023-41991 · CVE-2023-41992 · CVE-2023-41993 · Cytrox Predator

Indicators
127
Source reports
20
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02
20232026

Overview 127 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain127PREDATOR-domain.txt

Principal sources 20 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 127 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. or earlier 36 domainthis year

    recordedfuture.com/research/predator-still-active-new-link…

    asistentcomercialonline.com
    barbequebros.com
    boundbreeze.com
    branchbreeze.com
    c3p0solutions.com
    canylane.com
    clockpatcher.com
    craftilly.com
    dollgoodies.com
    drivemountain.com
    gamestuts.com
    gettravelright.com
    gilfonts.com
    gobbledgums.com
    lawrdo.com
    longtester.com
    mappins.io
    mountinnovate.com
    mundoautopro.com
    myread.io
    nightskyco.com
    noticiafresca.net
    openstreetpro.com
    remixspot.com
    roadsidefoodie.com
    stableconnect.net
    starryedge.com
    statuepops.com
    steepmatch.com
    streamable-vid.com
    strictplace.com
    themastersphere.com
    traillites.com
    unibilateral.com
    wtar.io
    zipzone.io

  2. 48 domain2 yrs ago

    x.com/felixaime/status/1834939287202099248 · github.com/SpyGuard/SpyGuard/commit/5d2c914d55089a…

    1domainregistry.com
    beinfo.net
    bestshowineu.com
    blocoinformativo.com
    buysalesblog.com
    c1tvapp.com
    caddylane.com
    cheesyarcade.com
    colabfile.com
    despachosnegocios.com
    eclipsemonitor.com
    eppointment.io
    eroticsmoments.com
    espeednet.com
    flickerxxx.com
    gardalul.com
    healthyhub.io
    humansprinter.com
    infoshoutout.com
    keep-badinigroups.com
    locmap.org
    mapsloc.net
    mdundobeats.com
    myowndrive.net
    mypinpoint.org
    myprivatedrive.net
    mystudyup.com
    newsfunnel.net
    noadsview.com
    noticiafamosos.com
    nuurs.net
    onelifestyle24.com
    pedalmastery.com
    pepalaunch-airdrop.info
    pinnedplace.com
    promobyfit.com
    runconnect.net
    secneed.com
    secretspotnow.com
    secsafty.com
    shopstodrop.com
    speedbrawse.com
    street-maps.net
    summerspooks.com
    svcsync.com
    trigship.com
    updatepoints.com
    vslojasvendas.com

  3. 12 domain2 yrs ago

    recordedfuture.com/research/predator-spyware-infrastructur… · virustotal.com/gui/ip-address/169.239.129.76/relations · virustotal.com/gui/ip-address/185.123.102.40/relations · virustotal.com/gui/ip-address/185.235.137.6/relations · virustotal.com/gui/ip-address/185.243.113.169/relations · virustotal.com/gui/ip-address/193.29.56.252/relations · virustotal.com/gui/ip-address/193.29.59.164/relations · virustotal.com/gui/ip-address/45.86.163.178/relations · virustotal.com/gui/ip-address/98.142.253.18/relations

    fruitynew.com
    gameformovies.com
    happytotstoys.com
    holidaypriceguide.com
    infoaomomento.com
    lesautreseux.com
    masoloyakati.com
    noisyball.com
    nyirangongovrai.com
    rhapresentacao.com
    toysfourtots.com
    yokananu.net

  4. 13 domain2 yrs ago

    blog.sekoia.io/the-predator-spyware-ecosystem-is-not-d…

    bni-madagascar.com
    cabinet-salyk.kz
    e-kgd.kz
    fr-monde.com
    jumia-egy.com
    kejoranews.net
    mmegi.co
    myfawry.net
    sdntribune.co
    suarapapua.co
    ulstur.co
    vlast-news.com
    yo-um7.com

  5. 1 domain3 yrs ago

    community.emergingthreats.net/t/ruleset-update-summary-2023-10-11-v10…

    southchinapost.net

  6. 17 domain3 yrs ago

    citizenlab.ca/2023/09/predator-in-the-wires-ahmed-elt… · virustotal.com/gui/ip-address/192.169.7.252/relations · virustotal.com/gui/ip-address/2.58.14.241/relations · virustotal.com/gui/ip-address/2.58.15.120/relations · virustotal.com/gui/ip-address/5.230.68.136/relations · virustotal.com/gui/ip-address/5.230.78.27/relations

    almal-news.com
    betly.me
    c.betly.me
    chat-support.support
    cibeg.online
    g.sec-flare.com
    notifications-sec.com
    notifications.wa-info.com
    sec-flare.com
    t-bit.me
    verifyurl.me
    wa-info.com
    web.whatssapp.co
    whatspp.wa-info.com
    whatssap.whatssapp.co
    whatssapp.co
    wts-app.info

Further reading 20