{"id":96701,"date":"2025-03-20T13:30:44","date_gmt":"2025-03-20T13:30:44","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=96701"},"modified":"2025-03-20T13:30:46","modified_gmt":"2025-03-20T13:30:46","slug":"new-steganographic-malware-exploits-jpeg-files","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/","title":{"rendered":"New Steganographic Malware Exploits JPEG Files to Distribute Infostealers"},"content":{"rendered":"\n

A sophisticated malware campaign employing steganographic techniques has recently been identified, targeting users through seemingly innocent JPEG image files.<\/p>\n\n\n\n

The attack leverages hidden malicious code embedded within image files that, when executed, initiates a complex chain of events designed to steal sensitive information from victims’ systems.<\/p>\n\n\n\n

This new threat represents a concerning evolution in malware distribution methods, combining social engineering with advanced obfuscation techniques.<\/p>\n\n\n\n

The attack begins with victims being lured into downloading what appears to be a standard JPEG file.<\/p>\n\n\n\n

However, these images contain concealed malicious scripts that remain undetectable to conventional security measures.<\/p>\n\n\n\n

Once the compromised file is accessed, the embedded code activates silently in the background.<\/p>\n\n\n\n

Broadcom analysts detected<\/a> that the malware employs a multi-stage infection process that begins with the extraction of the hidden payload from the image file.<\/p>\n\n\n\n

“The steganographic technique used in this campaign is particularly sophisticated, making detection challenging for traditional security tools,” noted the researchers in their technical analysis.<\/p>\n\n\n\n

Upon execution, the malware targets credential repositories in browsers, email<\/a> clients, and FTP applications.<\/p>\n\n\n\n

The extracted data is then exfiltrated to command-and-control servers while additional payloads are downloaded, including customized versions of known infostealer families such as Vidar, Raccoon, and Redline.<\/p>\n\n\n\n

Attack Analysis<\/strong><\/h2>\n\n\n\n

The malware authors utilized advanced obfuscation<\/a> techniques, including base64 encoding within PowerShell scripts to evade detection.<\/p>\n\n\n\n

The initial script, after being extracted from the JPEG file, uses Windows Script Host to execute commands with minimal visibility.<\/p>\n\n\n\n

The malicious code identified includes instructions for harvesting credentials from multiple browsers, with specific functions targeting cookie files, saved passwords, and form data.<\/p>\n\n\n\n

Protection against this threat is available through several security products<\/a>, with specific detection signatures including ACM.Ps-Base64!g1, ISB.Downloader!gen80, and Heur.AdvML.B.<\/p>\n\n\n\n

Users are advised to exercise caution when downloading image files from untrusted sources and ensure their security solutions are updated with the latest definitions.<\/p>\n\n\n\n

Investigate Real-World Malicious Links & Phishing Attacks With\u00a0Threat Intelligence Lookup<\/strong>\u00a0-\u00a0Try for Free<\/a><\/code><\/strong><\/code><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

A sophisticated malware campaign employing steganographic techniques has recently been identified, targeting users through seemingly innocent JPEG image files. The attack leverages hidden malicious code embedded within image files that, when executed, initiates a complex chain of events designed to steal sensitive information from victims’ systems. This new threat represents a concerning evolution in malware […]<\/p>\n","protected":false},"author":6,"featured_media":96703,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,48],"tags":[149,151],"class_list":{"0":"post-96701","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-threats","9":"tag-cyber-security","10":"tag-cyber-security-news"},"yoast_head":"\nNew Steganographic Malware Exploits JPEG Files to Distribute Infostealers<\/title>\n<meta name=\"description\" content=\"A malware campaign employing steganographic techniques has recently been identified, targeting users via seemingly innocent JPEG image files.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Steganographic Malware Exploits JPEG Files to Distribute Infostealers\" \/>\n<meta property=\"og:description\" content=\"A malware campaign employing steganographic techniques has recently been identified, targeting users via seemingly innocent JPEG image files.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-20T13:30:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-20T13:30:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp\" \/><meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tushar Subhra Dutta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tushar Subhra Dutta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"New Steganographic Malware Exploits JPEG Files to Distribute Infostealers","description":"A malware campaign employing steganographic techniques has recently been identified, targeting users via seemingly innocent JPEG image files.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/","og_locale":"en_US","og_type":"article","og_title":"New Steganographic Malware Exploits JPEG Files to Distribute Infostealers","og_description":"A malware campaign employing steganographic techniques has recently been identified, targeting users via seemingly innocent JPEG image files.","og_url":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-03-20T13:30:44+00:00","article_modified_time":"2025-03-20T13:30:46+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp","type":"","width":"","height":""},{"width":1600,"height":900,"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp","type":"image\/jpeg"}],"author":"Tushar Subhra Dutta","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp","twitter_creator":"@The_Cyber_News","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Tushar Subhra Dutta","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/"},"author":{"name":"Tushar Subhra Dutta","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c"},"headline":"New Steganographic Malware Exploits JPEG Files to Distribute Infostealers","datePublished":"2025-03-20T13:30:44+00:00","dateModified":"2025-03-20T13:30:46+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/"},"wordCount":317,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news"],"articleSection":["Cyber Security News","Threats"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/","url":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/","name":"New Steganographic Malware Exploits JPEG Files to Distribute Infostealers","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-03-20T13:30:44+00:00","dateModified":"2025-03-20T13:30:46+00:00","description":"A malware campaign employing steganographic techniques has recently been identified, targeting users via seemingly innocent JPEG image files.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/#primaryimage","url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/new-steganographic-malware-exploits-jpeg-files\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"New Steganographic Malware Exploits JPEG Files to Distribute Infostealers"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World's #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c","name":"Tushar Subhra Dutta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","caption":"Tushar Subhra Dutta"},"description":"Tushar is a senior cybersecurity and breach reporter. He specializes in covering cybersecurity news, trends, and emerging threats, data breaches, and malware attacks. With years of experience, he brings clarity and depth to complex security topics.","url":"https:\/\/cybersecuritynews.com\/author\/tushar\/"}]}},"jetpack_featured_media_url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhWn0Kbg4aEeMy9MOve32tRwsFzox-yyjJ3MDzipDQ_JoqAy7QK3HGwgBMjS7hOxkDUMMFAXbAhPc_0LLpl_B6oMudGTFRFxmrGev8XLc_gc7XmxLpfGRx-MQ0Cl9Mopwn6_dG4JkXeYIuY2pDMKwvf_KVOR52geFg9VjK8MXq1D0Q8b6anU5qMeEM__Q8\/s16000\/New%20Steganographic%20Malware%20Exploits%20JPEG%20Files%20to%20Distribute%20Infostealers.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/96701","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=96701"}],"version-history":[{"count":1,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/96701\/revisions"}],"predecessor-version":[{"id":96702,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/96701\/revisions\/96702"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/96703"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=96701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=96701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=96701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}