Ankura CTIX FLASH Update – February 13, 2026

Malware Activity

A Closer Look at New Ransomware and Botnet Attacks

Cybersecurity experts have identified a new type of ransomware called Reynolds that cleverly avoids detection by embedding a vulnerable driver inside its code. This driver disables security programs like Avast and Symantec, making it easier for attackers to operate unnoticed. The technique, known as Bring Your Own Vulnerable Driver (BYOVD), is made even more dangerous because the driver has a known flaw that allows the attackers to shut down security defenses completely. This method, combined with other malicious activities like stealing data and hacking networks, highlights how cybercriminals are becoming more organized and sophisticated. Meanwhile, a Linux-based botnet named SSHStalker has been found using simple but effective methods to spread, such as brute-force SSH attacks and old security flaws. It communicates through IRC channels, controls infected devices, and has the potential to