Intellexa

Intellexa was assembled by Tal Dilian, a former Israeli intelligence officer, as an alliance of smaller surveillance firms. Its flagship, Predator, came from North Macedonia's Cytrox and got onto iOS and Android through one-click links chaining zero-days in, among other things, Chrome. The corporate structure was spread across Greece, Cyprus, Ireland and Hungary — a handy way of turning export control into a jigsaw puzzle.

In Greece, Predator became a government crisis in 2022 when a journalist and an opposition leader turned out to have been targeted. The 2023 "Predator Files" investigation mapped its customers, and in March 2024 the US Treasury sanctioned Intellexa and Dilian personally — a rare move against a commercial spyware vendor.