Malvertising attacks using polyglot images spotted in the wild

guest · Feb 25, 2019

Malvertising attacks using polyglot images spotted in the wild
February 25, 2019
https://www.scmagazine.com/home/sec...ks-using-polyglot-images-spotted-in-the-wild/

The malvertising space may be seeing an influx of more advanced threat actors according one research report that found polyglot images now being used to disguise malvertising attacks.

Polyglot images, which differ from their near cousins steganographic images primarily by not needing an external script to extract the payload, have been spotted in the wild, said researchers at Devcon.
Similar JS/GIF polyglots have been shown in proof of concept tests to work around a server’s Content Security Policy to execute XSS attacks.

The incidents spotted by Devcon saw the malicious actors using .bmp images as their camouflage and trick a system into accepting the image by manipulating the size of the image and hexadecimal characters by making the computer believe it is looking at something benign.
Click to expand...

“This attack has many layers and new techniques to attempt to hide what it’s true nature is and to hinder white hat reverse engineers from figuring out exactly how it works,” Devcon said.
Click to expand...

Log in or Sign up

Malvertising attacks using polyglot images spotted in the wild

guest Guest

Log in or Sign up

Malvertising attacks using polyglot images spotted in the wild

guest Guest

Useful Searches