TLDR
Citizen Lab + Amnesty Tech 2024 have documented Italian journalists targeted by Predator (Intellexa). Vector: SMS with a personalized shortlink which, once clicked, exploits zero click/one click vulnerabilities on iOS/Android. Indicators:...
How it works
Citizen Lab + Amnesty Tech 2024 have documented Italian journalists targeted by Predator (Intellexa). Vector: SMS with a personalized shortlink which, once clicked, exploits zero click/one click vulnerabilities on iOS/Android. Indicators:...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1WHAT TO DO: never click shortlinks received via SMS without verification; enable Apple Lockdown Mode / Google Advanced Protection for high risk roles; update iOS/Android to the latest patch.
Source
Citizen-Lab-Khashoggi
Source reviewed by Mythos Forensic Team
https://citizenlab.ca/2024/06/predator-spyware-italian-journalists/FAQ
Is Predator spyware on Italian journalists 2024 (Citizen Lab/Amnesty) a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
WHAT TO DO: never click shortlinks received via SMS without verification; enable Apple Lockdown Mode / Google Advanced Protection for high risk roles; update iOS/Android to the latest patch.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.