New malware that uses steganography always gets my attention, but I was disappointed when I looked at the latest DOUBLECUP write-up. It doesn't use real steganography: You can see the PowerShell payload as cleartext: it has not been encoded into the pixels of the image. It's even not embedded in the image (like inside the metadata), it's just...
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf isc.sans.edu.
SOCIAL SHARE CARD GENERATOR