Ankura CTIX FLASH Update - October 24, 2025

Malware Activity

Supply Chain Attacks and Evolving Malware Campaigns

Cybersecurity experts have identified new threats involving supply chain attacks and malware campaigns. Attackers are exploiting the NuGet package manager by creating fake packages, such as "Nethereum.All." The malware appears to be popular through artificially inflated download counts. These packages contain malicious code designed to steal sensitive information, like cryptocurrency wallet keys. It does so by replacing characters in package names to evade detection. Meanwhile, the Russian hacking group Star Blizzard continues to adapt its tactics after the exposure of its LostKeys malware. They now deploy newer malware tools, such as NoRobot and MaybeRobot. The new tools are designed to trick victims into downloading malicious files that grant attackers control over infected systems. The group regularly updates its methods by changing file names, infrastructure, and techniques. By doing so,