Ankura CTIX FLASH Update - February 28, 2025

Malware Activity:

Cyber Shadows: The Rise of New Malware Threats

A recent trend in cybersecurity shows the emergence of several new malware threats, targeting Linux systems and crypto enthusiasts alike. The "Auto-Color" malware exploits vulnerabilities in Linux systems, providing unauthorized access to remote C2 servers as well as the ability to spawn reverse shells and uninstall itself. Meanwhile, a staggering 2,500 variants of the "TrueSightSys" driver have been discovered, potentially affecting users across various platforms by evading endpoint detection and deploying the Gh0st RAT malware. Adding to the chaos, the "GrassCall" malware campaign employs a social engineering strategy by conducting fake job interviews to steal crypto wallets.