Ankura CTIX FLASH Update – July 31, 2026

Malware Activity

Stealthy Cyber Campaigns Expose Growing Threats to Global Organizations

Security researchers have uncovered two highly sophisticated cyberespionage campaigns that highlight the increasing complexity of modern cyber threats. In South Korea, attackers compromised trusted websites and turned them into “watering holes.” This enabled the threat actor to silently compromise visitors by exploiting a vulnerability in the widely deployed AnySign4PC security software, resulting in malware installation without requiring any user interaction. Once inside, advanced backdoors known as SIGNBT and COPPERHEDGE enabled attackers to steal data, execute remote commands, move laterally across networks, and maintain long-term access while avoiding detection. At the same time, the Chinese-linked threat group Silver Fox targeted a Japanese manufacturing company using phishing emails disguised as invoices, delivering the ValleyRAT remote-access trojan through trusted cloud services and