Ankura CTIX FLASH Update - February 4, 2025

Malware Activity

Cyber Threats on the Rise: Malware and Spyware Campaigns Targeting Users Worldwide

A series of newly discovered cyber threats are targeting users worldwide, including a new Android malware called Tria, which is being spread through fake wedding invitations on Telegram and WhatsApp, primarily in Malaysia and Brunei, and steals sensitive data from SMS messages, emails, and messaging apps. Meanwhile, a banking malware known as Coyote is targeting Brazilian Windows users, delivering malicious activities such as keylogging, capturing screenshots, and displaying phishing overlays to steal sensitive credentials. Additionally, Meta-owned WhatsApp has disrupted a spyware campaign that targeted around 90 journalists and civil society members across over two dozen countries, using spyware from Israeli company Paragon Solutions, and has sent a "cease and desist" letter to the company. Furthermore, security researchers at SquareX have discovered a new