Ankura CTIX FLASH Update - April 29, 2025

Malware Activity

A Multi-Front Cyberattack Campaign Targets Businesses and Consumers

Cybercriminals are launching a multifaceted attack campaign, exploiting various vulnerabilities to infiltrate and compromise systems. One front focuses on WooCommerce store owners. WooCommerce administrators are facing a growing threat from hackers distributing counterfeit security patches that masquerade as legitimate updates, preying on the trust of site owners. Once these rogue patches are installed, they provide attackers with unauthorized access, allowing them to take control of entire websites. This alarming trend underscores the necessity for WooCommerce users to remain vigilant and only download updates from reputable sources; falling prey to these scams can lead to significant security breaches and potential data loss. Simultaneously, a new malware strain known as DSLogDRat is making waves for its sophisticated deployment through vulnerabilities in Ivanti's Endpoint