Ankura CTIX FLASH Update – January 27, 2026

Malware Activity

Phishing Campaigns and Stealthy Remote Access Attacks

Recent cybersecurity investigations reveal sophisticated attacks targeting users in Russia, where hackers use social engineering to trick individuals into opening malicious documents that appear legitimate. These campaigns deliver ransomware and powerful remote access tools like Amnesia RAT, allowing attackers to take control of infected systems, steal sensitive data, and manipulate files or even cryptocurrency transactions. Notably, the hackers exploit legitimate Windows features to disable security defenses, making detection harder. Additionally, cybercriminals are increasingly using trusted remote management software, like LogMeIn and RMM tools, by stealing credentials through fake emails to install hidden remote-control programs without raising suspicion. These tactics highlight the need for organizations to strengthen their defenses by monitoring unusual remote activity and