Experts warn of 'highly sophisticated' weaponized JPEG campaign used to send out ScreenConnect malware
- Attackers weaponized a .jpeg file to deliver PowerShell payloads, trojanized ScreenConnect, and establish persistence
- The malware enables credential theft, encrypted C2 comms, and surveillance features
- Cyfirma warns the campaign reflects a mature intrusion framework
Be careful when downloading files from the internet, as even innocent .jpeg files can actually contain malware, experts have warned.
Security researchers Cyfirma published an in-depth report on a brand new hacking campaign they named “Operation SilentCanvas”. While we don’t know the number of infections, or successfully compromised victims, the researchers said the campaign likely targets enterprises and other organizations using remote administration tools.
The attack starts when the victim receives the weaponized .jpeg file. Again, we don’t know the exact delivery mechanism, but Cyfirma speculates the file is delivered either via phishing emails with malicious attachments, deceptive file-sharing interactions, or fake software and update lures.
"Professionally engineered and operationally mature intrusion framework"
In any case,...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
