steganography news
3 stories
TerminalFix campaign deploys a reverse tunnel through multistage intrusion
A new cyber campaign, dubbed TerminalFix, has been reported to be actively targeting organizations through a sophisticated, multi-stage intrusion process. This campaign, identified as a variant of the previously known ClickFix operation, primarily relies on social engineering to initiate the attack chain, specifically by deceiving users into executing malicious PowerShell commands. The initial…
North Korean hackers use fake coding interviews to steal developer credentials
North Korean state-sponsored hackers are employing a sophisticated new tactic, dubbed "Contagious Interview," to compromise developers by embedding malware within seemingly benign coding challenges. The campaign, tracked as REF9403, leverages steganography to hide multi-stage payloads within SVG image files, which have gone undetected by all major antivirus vendors.
North Korean Hackers Use SVG Images to Hide Malware in Fake Coding Tests
Reports indicate that North Korean threat actors, linked to the "Contagious Interview" campaign, are leveraging steganography within Scalable Vector Graphics (SVG) image files to conceal malware. This sophisticated technique is being deployed as part of a broader campaign that utilizes deceptive job postings and fabricated coding challenges to distribute malicious payloads. The ultimate goal…