Stealthy Malware Hidden in Images Takes to GoogleUserContent

guest · Jul 19, 2018

Stealthy Malware Hidden in Images Takes to GoogleUserContent
Hackers are embedding malicious code within compromised, uploaded images on trusted Google sites – weaponizing the website and staying under the radar.
July 19, 2018
https://threatpost.com/stealthy-malware-hidden-in-images-takes-to-googleusercontent/134183/

Malware that uses Exchangeable Image File Format (EXIF) data to hide its code has migrated to a new platform: GoogleUserContent sites, such as Google+ and blogger forums. [...] images are rarely scanned for malware, researchers at Sucuri said on Thursday.

These scripts can weaponize the website by uploading a predefined web shell or arbitrary files, placing defacement pages, establishing backdoors and more, and then can email the addresses of successfully exploited sites back to the attacker. The migration to Google exacerbates the pervasiveness of the problem.

[...] “we see that the main goal is to host malicious scripts on a reliable and trusted server so that they are always available for downloading from any compromised sites,” explained Sucuri researcher Denis Sinegubko, in a posting on Thursday. “It could be an image uploaded for a blogger post, Google+ post or even a public picture from Google photos.”
Click to expand...

Log in or Sign up

Stealthy Malware Hidden in Images Takes to GoogleUserContent

guest Guest

Log in or Sign up

Stealthy Malware Hidden in Images Takes to GoogleUserContent

guest Guest

Useful Searches