Intellexa Spyware Firm Links to Skincare Company Medovie in Resurfaced Activity
Table of Contents
A controversial spyware firm, Intellexa, previously sanctioned by the United States, appears to be resuming operations through unexpected channels, including a connection to a skincare company named Medovie.This development raises new questions about the firm’s ability to evade international scrutiny and the potential for covert surveillance activities. The resurgence comes after a period of decreased activity following U.S. sanctions last year.
The Resurgence of Intellexa
Cyber threat researchers at the Insikt Group reported in June a renewed wave of activity from Intellexa . The report identified Predator spyware operating in over a dozen countries, including Saudi Arabia, the Democratic Republic of the Congo, and Kazakhstan, all nations with documented human rights concerns. Operators are reportedly employing new tactics to obscure their identities and avoid detection.
Intellexa’s Predator spyware is capable of extensive mobile phone monitoring, allowing customers to access data stored on a device and intercept communications. The U.S. government sanctioned Intellexa and its key personnel in 2024, citing the spyware’s use in targeting American officials, journalists, and policy experts.
Medovie: An Unlikely Connection
At the center of this renewed activity is Medovie, a skincare company co-founded by Sara hamou, a key figure in establishing Cyprus as a central hub for Intellexa’s operations. Hamou stated she invested her “all my savings” in launching Medovie,which promotes a blend of traditional Chinese medicine and Western research. The company initially operated through a Cypriot firm but temporarily took its website offline after sanctions were imposed on Intellexa and Hamou.
Earlier in 2025, Medovie’s website was reactivated, now operating through a Portuguese company, MDV Skin Care. Ownership of MDV Skin Care has been traced to Sylwia Jastrzebska, a 26-year-old Polish citizen who previously served as a director of Cytrox, a North Macedonian company sanctioned for developing predator spyware. jastrzebska’s appointment followed an incident where a reporter discovered the previous director, a 70-year-old pensioner, had no knowledge of the company.
Did You Know? Intellexa was founded by Tal Dilian, a former commander in an elite Israeli intelligence unit, and has recruited other former Israeli intelligence officers.
A Network of Companies and Individuals
Intellexa’s founder, Tal Dilian, and Hamou remain central to the network. The company’s privacy policy reveals that Medovie shares client data with unnamed companies within the “Medovie Group” located in Israel, Cyprus, and Switzerland. When questioned by the International Consortium of Investigative Journalists (ICIJ) and the Portuguese publication Expresso, a Medovie spokesperson maintained the firm is solely a skincare provider, stating, “that’s the full story. We don’t engage in any other type of activity, and we don’t share personal data with anyone.”
Though, further examination reveals a complex web of connections. Jastrzebska also serves as president of the board of Douro dynamics, a Warsaw-based company owned by Amos Levy, an Israeli-Portuguese businessman. Levy, in turn, incorporated Odyssey in the Sky, a Portuguese firm used to acquire a Cyprus-based company from Dilian in June 2024.
Levy obtained Portuguese citizenship in 2017 through a certificate of Sephardic Jewish descent issued by the Jewish Community of porto. He also owns Tamani s.r.o in the Czech Republic, purchased from Amos Uzan, an Israeli businessman with a background in security and communications for the Israeli government. Uzan’s wife, Petra, previously held ownership of another firm that was later transferred to Levy through Tamani; Petra’s mother was the unaware pensioner who initially served as a director of Cytrox.
Neither Hamou, Dilian, nor Jastrzebska responded to inquiries from ICIJ. Intellexa remains unsanctioned by the European Union, allowing its personnel to operate freely within the EU.
Key Players and Companies
| Entity | Role |
|---|---|
| Intellexa | Spyware developer and vendor |
| Predator | Intellexa’s primary spyware product |
| Sara Hamou | Co-founder of Medovie; key figure in Intellexa’s Cyprus operations |
| Tal Dilian | Founder of Intellexa; former Israeli intelligence commander |
| Sylwia Jastrzebska | Owner of MDV Skin Care; former director of Intellexa affiliate Cytrox |
| Medovie | Skincare company linked to Intellexa figures |
| Cytrox | Sanctioned North Macedonian company that developed Predator |
Pro Tip: Understanding the interconnectedness of these companies and individuals is crucial to tracing the flow of funds and potential surveillance activities.
Jastrzebska’s online presence reveals a penchant for leaving reviews on Google, including a comment praising a villa owned by Levy in Portugal as “a true paradise.” This seemingly innocuous detail adds another layer to the complex network of relationships.
What implications does this network have for global cybersecurity and privacy? And how effective are current sanctions in preventing the proliferation of surveillance technology?
The development of elegant spyware and its use by governments and private entities is a growing concern globally. The ability to monitor communications and access personal data poses important threats to privacy, freedom of expression, and democratic processes. The case of intellexa highlights the challenges of regulating the surveillance technology industry and the need for greater transparency and accountability. The use of shell companies and complex financial networks to obscure the origins and activities of these firms further complicates efforts to enforce sanctions and prevent abuse. The trend towards increased surveillance is likely to continue, requiring ongoing vigilance and international cooperation to protect fundamental rights.
Frequently Asked Questions about Intellexa and Medovie
- What is Intellexa? Intellexa is a consortium known for developing and selling Predator spyware to governments worldwide.
- what is the connection between Intellexa and Medovie? Medovie, a skincare company, was co-founded by Sara Hamou, a key figure in Intellexa’s operations.
- Has Intellexa been sanctioned? Yes, Intellexa and its key personnel have been sanctioned by the United States.
- What is Predator spyware capable of? Predator spyware can monitor all facts on a target’s mobile phone, including communications and data.
- Why is this case significant? This case demonstrates how companies can attempt to evade sanctions and continue operating through complex networks and seemingly unrelated businesses.
This unfolding story underscores the need for continued scrutiny of the spyware industry and the individuals and entities involved. We invite you to share this article with your network and join the conversation in the comments below. Subscribe to our newsletter for the latest updates on this and other critical investigations.
