Ankura CTIX FLASH Update - February 25, 2025

Malware Activity

The Rising Tide of Cyber Threats: From North Korea to Malicious Apps

North Korean hackers have allegedly targeted freelance software developers to craft refined malware. Meanwhile, an Android malware called SpyLend has successfully infiltrated Google Play, racking up more than 100,000 downloads, and increasing the alarm about the safety of mobile applications. Additionally, the Salt Typhoon group has been linked to the JumbledPath Malware. Salt Typhoon has been known to have had successful breaches against American telecom networks and has been found proficient in prolonged infiltration in important infrastructure, by employing advanced techniques like Living of the Living (Lotl). Cisco's Talos team has issued a warning about these ongoing dangers, and outlines the important needs of organizations to enhances its cyber security defense against these evolving tactics. Cybercriminals have recently developed advanced techniques to clone any brand's