Ankura CTIX FLASH Update - June 13, 2025

Malware Activity

From Wearable Devices to Sophisticated Ransomware Tactics

Recent cybersecurity research reveals a troubling evolution in attack methods, highlighting both the ingenuity and danger posed by modern threat actors. The "SmartAttack" technique demonstrates how compromised smartwatches can covertly extract sensitive data from air-gapped, high-security systems via Bluetooth. Exploiting seemingly benign consumer devices to bypass traditional defenses. Simultaneously, ransomware operators are adopting advanced, stealthy tactics by leveraging legitimate open-source tools and employee monitoring software like Syteca, along with exploiting vulnerabilities in VPNs and backup systems. Their use of familiar utilities such as PsExec, Impacket, and the GC2 backdoor illustrates a strategic shift toward blending malicious activity with legitimate processes to evade detection. These developments underscore the critical need for organizations to rethink security