Ankura CTIX FLASH Update - February 7, 2025

Malware Activity

A Series of Newly Discovered Malware Campaigns and Phishing Attacks Have Been Identified

A complex landscape of emerging cyber threats has been unearthed, characterized by the proliferation of malware campaigns and phishing attacks that are increasingly sophisticated and targeted. The SparkCat campaign, for instance, has been leveraging fake apps on both Apple's App Store and Google Play to steal victims' mnemonic phrases associated with cryptocurrency wallets, with over 242,000 downloads, while the FatBoyPanel campaign has been targeting Indian Android device owners via WhatsApp, harvesting sensitive personal and financial information. Meanwhile, cybercriminals are utilizing legitimate HTTP client tools, such as Axios and Node Fetch, to facilitate account takeover (ATO) attacks on Microsoft 365 environments, with a significant surge in attacks observed since March 2024, resulting in the compromise of over 51% of targeted organizations and 43%