steganography

Unmasking the DarkCloud: A New Stealer Is Hiding Malware in JPG Files

• Malware

Unmasking the DarkCloud: A New Stealer Is Hiding Malware in JPG Files

Do Son September 16, 2025 0

A new report reveals a multi-stage phishing campaign distributing DarkCloud Stealer. The malware hides its loader in a JPG file and injects code into MSBuild.exe for stealth.

Spies in Your Skype: GodRAT Malware Uses Steganography to Target Financial Firms

• Malware

Spies in Your Skype: GodRAT Malware Uses Steganography to Target Financial Firms

Do Son August 20, 2025 0

A new report reveals GodRAT, a sophisticated backdoor based on the Gh0st RAT family, is using steganography to launch attacks via Skype messenger.

APT37 Escalates Cyber-Espionage on South Korea: New RoKRAT Backdoor Uses Stealthy LNK Files & Steganography

• Malware

APT37 Escalates Cyber-Espionage on South Korea: New RoKRAT Backdoor Uses Stealthy LNK Files & Steganography

Do Son August 4, 2025 0

APT37, a North Korea-linked group, is using a new RoKRAT backdoor to target South Korea. The malware uses stealthy LNK files and steganography to evade detection.

0bj3ctivityStealer: Stealthy Info-Stealer Uses Steganography & PowerShell to Evade Detection

• Malware

0bj3ctivityStealer: Stealthy Info-Stealer Uses Steganography & PowerShell to Evade Detection

Do Son July 30, 2025 0

Trellix uncovers 0bj3ctivityStealer, a sophisticated info-stealer using phishing, custom PowerShell, and steganography to evade detection and exfiltrate sensitive data.

Interlock RAT Gets PHP Makeover: New Variant Uses Steganography & ClickFix for Stealthy Infiltration

• Malware

Interlock RAT Gets PHP Makeover: New Variant Uses Steganography & ClickFix for Stealthy Infiltration

Do Son July 14, 2025 0

The DFIR Report uncovers a new PHP-coded Interlock RAT variant, using compromised websites and ClickFix social engineering to deploy stealthy malware for recon and persistence.

XwormRAT Resurfaces with Steganography-Powered Attack Chain

• Malware

XwormRAT Resurfaces with Steganography-Powered Attack Chain

Do Son July 8, 2025 0

ASEC uncovers XwormRAT delivered via phishing emails using steganography, hiding sophisticated .NET malware within JPG images for stealthy execution and full system control.

DCRat: Sophisticated RAT Delivered via Phishing Campaign Impersonating Government Entity

• Malware

DCRat: Sophisticated RAT Delivered via Phishing Campaign Impersonating Government Entity

Do Son July 3, 2025 0

Fortinet exposes a DCRat campaign impersonating a Colombian government agency, using obfuscated multi-stage infection, steganography, and AMSI bypass to deliver the RAT.

Katz Stealer: New Stealthy MaaS Steals Everything, Hides in Images, and Hijacks Discord

• Malware

Katz Stealer: New Stealthy MaaS Steals Everything, Hides in Images, and Hijacks Discord

Do Son June 16, 2025 0

Katz Stealer, a new stealthy MaaS, is actively stealing data from browsers, crypto wallets, and apps, using advanced evasion tactics like steganography and Discord hijacking.

Stealth in Pixels: .NET Malware Hides Payloads in Bitmap Resources

• Malware

Stealth in Pixels: .NET Malware Hides Payloads in Bitmap Resources

Do Son May 13, 2025 0

Sophisticated malware hides inside image files within .NET apps to secretly infect systems, targeting finance in Türkiye and logistics in Asia.

JavaScript-Based Malware Exploits Steganography for Covert Data Theft

• Malware

JavaScript-Based Malware Exploits Steganography for Covert Data Theft

Do Son February 20, 2025 0

Discover how Stealer malware exploits JavaScript techniques to exfiltrate sensitive user data and evade detection.