Ankura CTIX FLASH Update - April 22, 2025

Malware Activity

Unraveling the Web of Cyber Threats: From Malicious Packages to NFC Exploits

Recent cybersecurity investigations have unveiled a troubling array of threats endangering users and organizations alike. Researchers have uncovered malicious NPM packages pretending to be Telegram bot libraries, which were designed to steal sensitive user information by hijacking API keys and credentials. The rogue packages, named "messenger", "telebot", and "bot-sdk", were cleverly disguised to avoid detection. Which raises concerns about the security of open-source software. Meanwhile, a newly discovered Android malware called "Supercard X", which is designed to exploit stolen credit card information in NFC relay attacks. This malware allows cybercriminals to bypass security measures by using the targeted victim's card information to make contactless payments, effectively stealing from them without physical possession of the card. Security experts warn that