Ankura CTIX FLASH Update - March 28, 2025

Malware Activity

Cyber Threats Evolve: The New Frontiers of Ransomware and Malicious Software

In a striking evolution of cybercrime, the notorious RedCurl group has unveiled a sophisticated ransomware variant targeting Hyper-V server. This marks a move that shifts their focus from traditional data exfiltration to the disruptive encryption of crucial business operations on Microsoft's virtualization platform. This escalation highlights the growing complexity of cyber threats as hackers adapt their strategies to increase their impact on enterprise security.

Simultaneously, a newly uncovered malicious package in the Node Package Manager (NPM) ecosystem poses grave risks to developers. The malicious package stealthily modifies project files under the guise of legitimacy and thus threatens the integrity of software projects. The danger doesn't stop there; an emerging strain of Android malware exploits Microsoft's .NET MaUI framework to evade detection. It leverages