Steganography in contemporary cyberattacks

itman · Aug 6, 2017

Very detailed and inclusive article on the subject.

Recently, we have seen steganography used in the following malware programs and cyberespionage tools:

Microcin (AKA six little monkeys);

NetTraveler;

Zberp;

Enfal (its new loader called Zero.T);

Shamoon;

KinS;

ZeusVM;

Triton (Fibbit).

So why are malware authors increasingly using steganography in their creations? We see three main reasons for this:

It helps them conceal not just the data itself but the fact that data is being uploaded and downloaded;

It helps bypass DPI systems, which is relevant for corporate systems;

Use of steganography may help bypass security checks by anti-APT products, as the latter cannot process all image files (corporate networks contain too many of them, and the analysis algorithms are rather expensive).

Click to expand...

https://securelist.com/steganography-in-contemporary-cyberattacks/79276/

guest · Aug 7, 2017

old trick modernized

"it happened in the past , it will happen in the future" - quoted from a Cylon

Log in or Sign up

Steganography in contemporary cyberattacks

itman Registered Member

guest Guest

Log in or Sign up

Steganography in contemporary cyberattacks

itman Registered Member

guest Guest

Useful Searches