Ankura CTIX FLASH Update – August 28, 2026

Malware Activity

Emerging GPU and Endpoint Attacks Defeat Trusted Security Controls

Researchers have identified two (2) sophisticated cyber threats that show how attackers can bypass protections traditionally considered reliable. The University of Toronto’s GPUThor attack can overcome NVIDIA ECC safeguards on several Ampere-based professional GPUs by producing unusually high numbers of memory bit flips. An attacker able to run an unprivileged CUDA workload could crash GPU operations, trigger repeated resets, corrupt page tables, access protected system memory, and potentially gain root privileges. This makes shared GPU infrastructure, AI platforms, and multi-tenant cloud environments especially vulnerable, even when ECC is enabled. Separately, a campaign targeting Cambodia uses convincing phishing documents to install Spark RAT through DLL sideloading, encrypted payloads hidden in PNG files, and analysis-evasion techniques. The attackers also exploit a vulnerable OPSWAT driver to