Intellexa’s Predator spyware used to hack iPhone of journalist in Angola, research says

A authorities lawsuit of sanctioned spyware shaper Intellexa hacked the telephone of a salient writer successful Angola, according to Amnesty International, the latest lawsuit of targeting idiosyncratic successful civilian nine with almighty telephone hacking software.

The quality rights enactment published a caller study Tuesday analyzing respective hacking attempts against section writer and property state activistic Teixeira Cândido, successful which helium was sent a bid of malicious links via WhatsApp during 2024. 

Cândido yet clicked connected 1 and his iPhone was hacked with Intellexa’s spyware, dubbed Predator, Amnesty found.

The caller probe shows again that authorities customers of commercial surveillance vendors are progressively utilizing spyware utilized to people journalists, politicians, and different mean citizens, including critics. Researchers person antecedently recovered grounds of Predator maltreatment successful Egypt, Greece, and Vietnam, wherever the authorities reportedly targeted U.S. officials by sending the spyware via links connected X.  

Intellexa is 1 of the astir arguable spyware makers of the past fewer years, operating from antithetic jurisdictions to skirt export laws, and utilizing an “opaque web of firm entities” — arsenic a U.S authorities authoritative put it astatine the clip — to fell its activities.

In 2024, astir the aforesaid clip 1 of Intellexa’s customers was targeting Cândido with its spyware, the outgoing Biden medication sanctioned the company, arsenic good arsenic its laminitis Tal Dilian and his concern spouse Sara Aleksandra Fayssal Hamou. 

Earlier this year, the Treasury lifted sanctions against 3 different executives tied to Intellexa, a determination that near Senate Democrats demanding answers from the Trump administration. 

Dilian did not respond to a petition for comment.

An illustration of a malicious nexus sent by the hackers to Cândido connected WhatsApp. (Image: Amnesty International)

Amnesty researchers wrote successful the study that they linked the intrusions to Intellexa by examining forensic traces recovered connected Cândido’s phone. Amnesty said that Intellexa utilized corruption servers that had been antecedently linked to the company’s spyware infrastructure. 

Several hours aft clicking connected the nexus that led to his telephone hack, Cândido rebooted his phone, which wiped the spyware from his device. Amnesty said it wasn’t wide however the spyware was susceptible of hacking Cândido’s phone, arsenic his telephone was moving an outdated mentation of iOS astatine the time.

The researchers recovered that Predator stayed hidden by impersonating morganatic iOS strategy processes to debar detection. 

Amnesty believes Cândido whitethorn beryllium conscionable 1 of galore targets successful the country, based connected their findings that they were capable to find aggregate domains linked to the spyware shaper utilized successful Angola. 

“The archetypal domains linked to Angola were deployed arsenic aboriginal arsenic March 2023, indicating the commencement of Predator investigating oregon deployment successful the country,” wrote the Amnesty researchers, who added that they had nary grounds to find precisely who hacked Cândido. 

“It is not presently imaginable to conclusively place the lawsuit of the Predator spyware successful the country,” work the report. 

Last year, based connected leaks of interior documents, Amnesty and media organizations revealed that Intellexa employees had the quality to entree customers’ systems remotely, perchance giving the spyware shaper visibility into authorities surveillance operations. 

Those leaks, similar this report, shows that contempt its controversies and sanctions, Intellexa has remained progressive successful caller years.

“We’ve present seen confirmed abuses successful Angola, Egypt, Pakistan, Greece, and beyond — and for each lawsuit we uncover, galore much abuses surely stay hidden,” said Donncha Ó Cearbhaill, the caput of the information laboratory astatine Amnesty International.