Ankura CTIX FLASH Update - August 12, 2025

Malware Activity

Cryptocurrency Heists to Hardware Attacks, Cybercriminals are employing increasingly sophisticated tactics

GreedyBear is a group that has stolen over $1 million in cryptocurrency through malicious browser extensions and fake websites. Their operations leverage social engineering, malware, and convincing mimicry of legitimate platforms to deceive users into revealing sensitive information or transferring funds. Concurrently, new hardware-level vulnerabilities like the "BadCam" or "BadUSB" attack exploit firmware modifications in Linux-compatible webcams, turning them into stealthy backdoors that are difficult to detect or remove. These developments highlight the evolving landscape of cyber threats, emphasizing the need for heightened vigilance, rigorous security protocols, and supply chain integrity to protect digital assets and infrastructure from both software-based deception and hardware-based exploits. CTIX analysts will continue to report