Ankura CTIX FLASH Update - July 18, 2025

Malware Activity

Emerging Cyber Threats Targeting Remote Access Infrastructure and AI-Driven Social Engineering

Recent cybersecurity developments highlight the increasing sophistication of threats targeting remote access and cloud-based communication platforms. SonicWall's Secure Mobile Access (SMA) devices have come under a complex cyberattack involving the Overstep rootkit. Which exploits a zero-day vulnerability to establish persistent access. Thereby enabling ransomware deployment and stealthy network infiltration. This incident underscores the escalating risks associated with remote access solutions. Prompting SonicWall to advise immediate security updates and enhanced protective measures. Concurrently, over 1.8 billion Gmail users face a rising threat from AI-enhanced social engineering attacks. Wherein attackers embed hidden commands within seemingly innocuous emails using techniques like white-on-white text to evade detection. Leveraging Google's Gemini