Predator spyware endures even after widespread exposure, analysis shows | CyberScoop<\/title> <meta name=\"description\" content=\"The operators of the Predator spyware rebuilt their infrastructure and operate in at least 11 countries after being exposed last year.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/predator-spyware-endures-after-exposure\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Predator spyware endures even after widespread exposure, analysis shows\"> <meta property=\"og:description\" content=\"The operators of the Predator spyware rebuilt their infrastructure and operate in at least 11 countries after being exposed last year.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/predator-spyware-endures-after-exposure\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:published_time\" content=\"2024-03-01T15:00:00+00:00\"> <meta property=\"article:modified_time\" content=\"2024-03-01T15:16:56+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg\"> <meta property=\"og:image:width\" content=\"1980\"> <meta property=\"og:image:height\" content=\"1320\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"AJ Vicens\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@AJVicens\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1706643139g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/_static\/??\/wp-content\/mu-plugins\/search\/elasticpress-next\/dist\/css\/related-posts-block-styles.min.css,\/wp-content\/plugins\/embedpress\/Gutenberg\/dist\/blocks.style.build.css?m=1708535870\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/_static\/??\/wp-content\/plugins\/embedpress\/assets\/css\/embedpress.css,\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1709304291\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=17ca7a1ec36db7d13744\" media=\"all\">\n<link rel=\"stylesheet\" id=\"all-css-10\" href=\"https:\/\/cyberscoop.com\/_static\/??\/wp-includes\/css\/dashicons.min.css,\/wp-content\/plugins\/embedpress\/assets\/css\/plyr.css?m=1706672560\" type=\"text\/css\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/79564\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.4.3\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=79564\">\n<link rel=\"alternate\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fpredator-spyware-endures-after-exposure%2F\">\n<link rel=\"alternate\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fpredator-spyware-endures-after-exposure%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-79564 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/predator-spyware-endures-after-exposure\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"25.302259887006\">\n<div class=\"single-article__header-content\" readability=\"30.809128630705\">\n<p> The operators of the Predator spyware rebuilt their infrastructure and operate in at least 11 countries after being exposed last year. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows.jpg?resize=640%2C426&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt=\"A conceptual image of CCTV cameras spying on a laptop computer with message bubbles.\" decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg 1980w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-2.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> A conceptual image of CCTV cameras spying on a laptop computer with message bubbles. (J Studios via GettyImages) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"66.560343431071\"><body readability=\"133.85500420521\"><\/p>\n<p>When researchers and journalists published <a href=\"https:\/\/eic.network\/projects\/predator-files.html\">a sweeping investigation<\/a> last year detailing the technical infrastructure and sale and distribution of the spyware known as \u201cPredator,\u201d the number of servers used to deliver the tool quickly plummeted. <\/p>\n<p>The investigation seemed to indicate that naming and shaming firms engaged in the operation of digital tools used to violate human rights could disrupt such technology. But within weeks, the operators behind Predator reconstituted and resumed work around the world, according to a new report. <\/p>\n<p>New infrastructure associated with Predator is currently active in at least 11 countries, including Botswana and the Philippines, two countries where use of the tool has not been previously documented, according to an <a href=\"https:\/\/www.recordedfuture.com\/predator-spyware-operators-rebuild-multi-tier-infrastructure-target-mobile-devices\">analysis from Recorded Future\u2019s Insikt Group published Friday<\/a> and shared exclusively with CyberScoop. <\/p>\n<p>\u201cWhat this shows is that tackling mercenary spyware as a problem requires a holistic, multi-pronged approach,\u201d said John Scott-Railton, a senior researcher with Citizen Lab who reviewed the report. \u201cNaming and shaming? Not enough. Regulations alone? Not enough. Technical solutions? Not necessarily enough.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>In October, a consortium of more than a dozen European media outlets, alongside Amnesty International, published \u201c<a href=\"https:\/\/eic.network\/projects\/predator-files.html\">The Predator Files<\/a>,\u201d the culmination of a year-long investigation into the sale and distribution by European companies of Predator, powerful spyware that has been abused by various governments to target dissidents and other critics. The project launched a week after Sekoia, a European cybersecurity software provider, <a href=\"https:\/\/blog.sekoia.io\/active-lycantrox-infrastructure-illumination\/\">detailed technical infrastructure<\/a> associated with some of the Predator activity.<\/p>\n<p>Following the flurry of international attention, particularly Sekoia\u2019s report, the number of active Predator delivery servers \u2014 which refers to the systems used to control the spyware \u2014 sharply dropped. At the start of October, researchers could see slightly more than 150 active delivery Predator delivery servers. A month later, at the start of November, that number had dropped by two-thirds to around 50. <\/p>\n<p>The number of active delivery servers continued to drop, but at the same time, the operators of Predator \u2014 a <a href=\"https:\/\/www.amnesty.org\/en\/latest\/news\/2023\/10\/global-predator-files-spyware-scandal-reveals-brazen-targeting-of-civil-society-politicians-and-officials\/\">nebulous corporate coalition<\/a> known as the \u201cIntellexa alliance\u201d \u2014 began rebuilding a new set of infrastructure to control the software. By the first week of December, a fresh set of approximately 50 delivery servers were up and running. By mid-January, when the analysis cuts off,<strong> <\/strong>Recorded Future could observe 81 delivery servers. <\/p>\n<p>The Predator operators \u201cseem to persist with minimal alterations to their modes of operation,\u201d the report, authored by the researcher Julian-Ferdinand V\u00f6gele, concludes. The operation\u2019s new infrastructure uses similar themes in spoofed domains and continues to impersonate similar organizations, such as news outlets. Spoofed domains are used to deliver Predator malware. If a target is enticed to click a link based on a spoofed news, sports or weather-related domain, for instance, the exploit chain delivering the malware is triggered, according to the report.<\/p>\n<p>\u201cWhile these patterns are relatively easy for threat researchers to identify, these TTPs are presumably producing satisfactory results, eliminating the need for changes,\u201d the report notes, referring to tactics, techniques and procedures.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Scott-Railton said the report highlights that while spyware vendors, including those like Predator, are at least partially trying to cover their tracks, infrastructure modifications show that \u201cthey still don\u2019t feel compelled to <em>really <\/em>obfuscate their operations.\u201d <\/p>\n<p>Exposure is valuable, Scott-Railton said, but it seems that \u201cCytrox is still not terrified of discovery, and from that you can read something pretty dramatic about their fear of consequences, to themselves and their operations, or lack thereof.\u201d<\/p>\n<p>Predator dates to at least 2019 and was created by Cytrox, a company that was later folded into the Intellexa alliance. Cytrox and Intellexa have been <a href=\"https:\/\/cyberscoop.com\/commerce-department-blacklists-spyware-companies\/\">blacklisted<\/a> by the U.S. government.<\/p>\n<p>On Wednesday, Sekoia <a href=\"https:\/\/blog.sekoia.io\/the-predator-spyware-ecosystem-is-not-dead\/\">posted its own update<\/a> regarding the Predator infrastructure it has observed, including in Botswana.<\/p>\n<p>Friday\u2019s report highlights that the continuing proliferation of spyware continues to widen the circle of potential victims. While the firms behind this type of technology argue it is an essential tool in combating crime and terrorism, Predator has been used to brazenly target members of civil society, journalists, politicians and academics in the European Union, the United States and Asia, according to <a href=\"http:\/\/Predator%20dates%20to%20at%20least%202019%20and%20was%20created%20by%20Cytrox,%20a%20company%20that%20was%20later%20folded%20into%20the%20Intellexa%20alliance,%20%22a%20complex%20and%20often%20changing%20group%20of%20companies%20that%20develops%20and%20sells%20surveillance%20products,%22%20according%20to%20Amnesty%20International.%20Cytrox%20and%20Intellexa%20have%20been%20blacklisted%20by%20the%20U.S.%20government.\">Amnesty International\u2019s summary of the<\/a> investigation published in October.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Predator represents just one spyware platform in an ecosystem with dozens of vendors, and given the industry\u2019s profitability, the sophistication of firms marketing spyware tools seems to only be growing. Last month, <a href=\"https:\/\/cyberscoop.com\/google-governments-need-to-do-more-to-combat-commercial-spyware\/\">Google\u2019s Threat Analysis Group noted<\/a> that 20 of the 25 in-the-wild zero-days the group discovered in 2023 were exploited by spyware vendors. <\/p>\n<p>Policymakers are trying to curb the proliferation of spyware, and last month the <a href=\"https:\/\/cyberscoop.com\/visa-travel-commercial-spyware\/\">U.S. State Department said<\/a> it would on a case-by-case basis deny visas for individuals looking to travel to the U.S. and who have been implicated in the misuse of commercial spyware. A day later, a coalition of civil society groups, companies and governments announced an effort to study the problem as part of the <a href=\"https:\/\/www.diplomatie.gouv.fr\/en\/french-foreign-policy\/digital-diplomacy\/news\/article\/the-pall-mall-process-tackling-the-proliferation-and-irresponsible-use-of\">Pall Mall Process<\/a>.<\/p>\n<p>Last year, President Joe Biden signed an <a href=\"https:\/\/cyberscoop.com\/white-house-spyware-executive-order\/\">executive order<\/a> barring U.S. government agencies from using commercial spyware that presents a national security risk to the United States.<\/p>\n<p>Meta is currently suing the NSO Group, whose spyware known as Pegasus has been implicated in attacks on WhatsApp users. On Thursday, a federal court <a href=\"https:\/\/www.theguardian.com\/technology\/2024\/feb\/29\/pegasus-surveillance-code-whatsapp-meta-lawsuit-nso-group?CMP=twt_b-gdnnews\">ordered<\/a> handed Meta a major victory in that lawsuit by ordering NSO to turn over the source code for Pegasus. <\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"1.2026431718062\">\n<div class=\"author-card\" readability=\"8\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/03\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows-1.jpg?w=640&ssl=1\" alt=\"AJ Vicens\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by AJ Vicens<\/h4>\n<p> AJ covers nation-state threats and cybercrime. He was previously a reporter at Mother Jones. Get in touch via Signal\/WhatsApp: (810-206-9411). <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Geopolitics<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/predator-spyware-endures-after-exposure\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Predator spyware endures even after widespread exposure, analysis shows |<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1628,1599,1629,1630,482,288],"tags":[1631,1601,1632,1633,484,294],"class_list":["post-2639","post","type-post","status-publish","format-standard","hentry","category-cytrox","category-executive-order","category-intellexa","category-predator","category-spyware","category-threats","tag-cytrox","tag-executive-order","tag-intellexa","tag-predator","tag-spyware","tag-threats"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cytrox\/\" rel=\"category tag\">Cytrox<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/executive-order\/\" rel=\"category tag\">Executive order<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/intellexa\/\" rel=\"category tag\">Intellexa<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/predator\/\" rel=\"category tag\">Predator<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/spyware\/\" rel=\"category tag\">spyware<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/threats\/\" rel=\"category tag\">Threats<\/a>","tag_info":"Threats","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=2639"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2639\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=2639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=2639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=2639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":2639,"date":"2024-03-01T15:00:00","date_gmt":"2024-03-01T15:00:00","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=79564"},"modified":"2024-03-01T15:00:00","modified_gmt":"2024-03-01T15:00:00","slug":"predator-spyware-endures-even-after-widespread-exposure-analysis-shows","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/03\/01\/predator-spyware-endures-even-after-widespread-exposure-analysis-shows\/","title":{"rendered":"Predator spyware endures even after widespread exposure, analysis shows"},"content":{"rendered":"