Attack code hidden in metadata of PNG files

tlu · Feb 6, 2014

http://blog.sucuri.net/2014/02/new-iframe-injections-leverage-png-image-metadata.html

This is unique because in the level of effort being taken to obfuscate the payload. Most scanners today will not decode the meta in the image, they would stop at the JavaScript that is being loaded, but they won’t follow the cookie trail. This also talks to the benefit, at least for attackers, it’s exceptionally difficult to detect.

Do make note however that while in this specific case we’re talking about PNG, the concepts do and can apply to other image file types as well.
Click to expand...

ronjor · Feb 6, 2014

Posted here. https://www.wilderssecurity.com/showthread.php?t=359593

Log in or Sign up

Attack code hidden in metadata of PNG files

tlu Guest

ronjor Global Moderator

Log in or Sign up

Attack code hidden in metadata of PNG files

tlu Guest

ronjor Global Moderator

Useful Searches