The regime is deploying advanced spyware (e.g., Predator and Pegasus) to spy on ICE protestors, ICE targets, & "antifa"

[pat_k]

They have "unbanned" advanced spyware

Rachel Maddow explains that while much of Donald Trump's abuse of power is typical of authoritarians, Trump has a new tool that no authoritarian before him has had: extremely advanced spyware, such as predator and pegasus. Trump is already deploying this new weapon through ICE, which intends to use this surveillance technology against immigrants but also against Americans who protest against ICE, and anyone they might snare with an extremely loose definition of "anti-fascist."

AI Summary

Predator spyware and the Intellexa alliance

Developers: Predator is sold by the Intellexa alliance, a complex network of companies that includes Cytrox, based in North Macedonia.

Capabilities: The software is highly invasive, with advanced obfuscation capabilities designed to evade detection. It can infiltrate devices, extract sensitive data, and even activate microphones and cameras without the user's knowledge.

Notable incidents:

Greek surveillance scandal: Predator was at the center of a scandal involving the wiretapping of journalists and opposition politicians in Greece in 2022.

Targeting US officials: U.S. government officials, including members of Congress, have been targeted with Predator spyware by foreign entities.

U.S. sanctions: In 2024, the U.S. government imposed sanctions on the Intellexa consortium and its leadership due to the threat their technology poses to national security.

Pegasus spyware and the NSO Group

Developers: Pegasus was created by the NSO Group, a private company headquartered in Israel.

Capabilities: It is capable of secretly infecting phones and extracting private information, including emails, texts, and photos, often without any sign of intrusion.

Notable incidents:

Global abuse: The software has been used by governments around the world to spy on human rights defenders, journalists, and political opponents.

Double infection: In a particularly notable case, the phone of an Egyptian dissident was found to be simultaneously infected with both the Pegasus and Predator spyware.

European Parliament investigation: The European Parliament launched a committee of inquiry to investigate the use of Pegasus and similar spyware.

[Pinback]

1. Cyber Security News: iOS 26 Deletes Pegasus and Predator Spyware Infection Evidence

Oct. 27, 2025:

The emergence of Pegasus and Predator spyware over the past several years has transformed the landscape of mobile device security.

These advanced malware strains—deployed by sophisticated threat actors for surveillance and espionage—have repeatedly demonstrated their ability to exploit zero-click vulnerabilities, leaving high-profile individuals and at-risk communities exposed.

But hey, I’ve got nothing to hide. What do I need to worry about? Think again.

Critical forensic analysis has long relied on remnants within iOS system logs, particularly the shutdown.log file, to discern traces of such infections even after the malware attempts to erase itself.

With the release of iOS 26, forensic methodologies face an unprecedented setback. iVerify analysts identified that Apple’s latest OS version now overwrites the shutdown.log file upon each device reboot, instead of appending new log entries.

This seemingly innocuous change—whether intentional or inadvertent—has significant consequences for digital evidence preservation.

Any device updated to iOS 26 that is subsequently restarted will see all prior shutdown.log content erased, destroying potential indicators of compromise linked to Pegasus, Predator, or similar threats.

More: https://cybersecuritynews.com/ios-26-deletes-pegasus-and-predator-spyware-infection-evidence/

Good reason for iPhone users not to upgrade to iOS 26.

[pat_k]

2. ...whether intentional or inadvertent...

Well, if they correct this with an update, perhaps "inadvertent." If they don't, I think we have our answer.