Ankura CTIX FLASH Update - March 11, 2025

Malware Activity

Cyber Underbelly: A Surge of Sophisticated Threats Targeting Victims Worldwide

A new silent cryptominer, named "SilentCryptoMiner", has infiltrated around 2,000 Russian computers, using deceptive tactics to quietly siphon off processing power without user detection. The cryptominer, that is derived from the open-source XMRig, pads the malicious file with random blocks of data to artificially increase its file size to 690 MB. This strategy is intended to evade automated analysis by antivirus programs and sandboxes. Meanwhile, content creators on YouTube are experiencing extortion via false copyright claims and being tricked into distributing cryptocurrency miners and malware to unwitting victims. Adding to the cyber chaos, a notorious ransomware gang known as "Akira", have been found using an insecure webcam vulnerability to infiltrate the organizations network, effectively sidestepping endpoint detection and response systems. Finally, a new