Ankura CTIX FLASH Update - March 25, 2025

Malware Activity

Cybersecurity Under Siege: Navigating the Rising Tide of Malware Threats

Researchers have revealed that a Microsoft trusted signing service has been exploited to sign malware, enabling harmful software to masquerade as legitimate applications and deceive security systems reliant on trusted signatures. This exploitation raises significant concerns about online safety, as it enables attackers to bypass security systems that trust software signed by well-known entities. In a related effort to bolster platform integrity, the VSCode Marketplace took decisive action against two malicious extensions. "Code Helper" and another similarly detrimental tool were created to covertly gather sensitive information from developers. This prompted Microsoft to warn users about the importance of caution in coding environments. Concurrently, the FBI has begun alerting the public regarding fake file conversion websites that mimic reputable services