Compromised Website Images Camouflage ObliqueRAT Malware
Emails spreading the ObliqueRAT malware now make use of steganography, disguising their payloads on compromised websites. The ObliqueRAT malware is now cloaking its payloads as seemingly-innocent image files that are hidden on compromised websites. The remote access trojan (RAT), which has been operating since 2019, spreads via emails, which have malicious Microsoft Office documents attached. Previously, payloads were embedded into the documents themselves. Now, if users click on the attachment, they’re redirected to malicious URLs where the payloads are hidden with steganography. Research...
Source: threatpost.com