As part of other campaigns, threat actors have been seen hiding dangerous code in pictures to distribute malware like 0bj3ctivity Stealer and VIP Keylogger.
The Hacker News obtained HP Wolf Security’s Threat Insights Report for Q3 2024, which stated that “in both campaigns, attackers hid malicious code in images they uploaded to archive[.]org, a file-hosting website, and used the same.NET loader to install their final payloads.”
The initial step is a phishing email that poses as purchase orders and invoices in order to fool recipients into opening malicious attachments, including Microsoft Excel spreadsheets, which then use a known Equation Editor security weakness (CVE-2017-11882) to download a VBScript file read more about Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.