New research reveals that operators of the Predator spyware have rebuilt a multi-tier infrastructure targeting mobile devices in at least eleven countries. The spyware is marketed for counterterrorism but often used against civil society. Technical analysis identified new delivery domains and servers still active after public disclosures in 2023. Users should follow security best practices like updates, lockdown mode, and separating personal and corporate devices.