Scalable Vector Graphics (SVG) Archives

Hackers use pixel-large SVG trick to hide credit card stealer

9Apr

By RBNo Comments

News

Hackers use pixel-large SVG trick to hide credit card stealer

Credit card-stealing code is concealed in a pixel-sized Scalable Vector Graphics (SVG) graphic in a large campaign that affects almost 100 online retailers that use the Magento e-commerce platform. The victim is presented with a convincing overlay that can verify billing information and card details when they click the checkout button. Sansec, an eCommerce security company, found the campaign. According to their study, the attacker most likely obtained access by taking advantage of the PolyShell vulnerability that was made public in mid-March. All installations of Adobe Commerce stable version 2 and Magento Open Source are affected by PolyShell, which permits unauthenticated code execution and account takeover. Sansec cautioned that PolyShell attacks, which in some cases used cre...

Researchers Expose Phishing Threats Distributing CountLoader and PureRAT

A new campaign has been seen that uses phishing attempts to pose as Ukrainian government entities in order to deploy CountLoader, which is subsequently used to dump PureMiner and Amatera Stealer. According to Yurren Wan, a researcher at Fortinet FortiGuard Labs, the phishing emails contain malicious Scalable Vector Graphics (SVG) files that are intended to fool recipients into opening dangerous attachments, as reported by The Hacker News. A Compiled HTML Help (CHM) file is contained in a password-protected ZIP archive that is downloaded using the SVG files in the attack chains that the cybersecurity firm has documented. When the CHM file is started, a series of actions are initiated that lead to the deployment of CountLoader. According to the emails, the National Police of Ukraine h...

Phishing emails increasingly use SVG attachments to evade detection

Scalable Vector Graphics (SVG) attachments are being used more often by threat actors to distribute malware or show phishing forms without being discovered. JPG and PNG files, which are composed of grids of tiny squares called pixels, make up the majority of photos on the internet. The entire image is made up of pixels, each of which has a distinct color value. Scalable Vector Graphics, or SVG, uses lines, shapes, and text that are described in textual mathematical formulas in the code to make graphics rather than pixels read more about Phishing emails increasingly use SVG attachments to evade detection. Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.