Predator Malware: Trust Broken at the Core

No ratings

Presented at Nullcon Goa 2025 by

In 2023, Cytrox's Predator malware re-emerged in its second iteration, leaving cybersecurity experts with limited insights. Despite Predator's growing threat, detailed analysis of this commercial spyware remains scarce. We now had a rare opportunity to analyze the latest version of Predator, shining a light on what makes it one of the most sophisticated and covert threats in recent years. In this talk, we will break down Predator's architecture, including the distinct features introduced in its second iteration. We'll explore its complex infection chain, evasive techniques and the the differences between the first and second iteration. By examining this threat in detail, we aim to not only expose the methods behind Predator but also to equip cybersecurity professionals with knowledge to better anticipate and counter such malware in the future.