A new campaign discovered by security researchers shows that cybercriminals are hiding malware inside WAV audio files. This technique of obfuscating malicious code in plain sight — a method called steganography — was uncovered by BlackBerry’s cybersecurity subsidiary Cylance.

“When played, some of the WAV files produced music that had no discernible quality issues or glitches. Others simply generated static (white noise),” the researchers noted. But in reality, the WAV files — delivered via targeted phishing emails — were a vector to distribute malicious payloads that surreptitiously abused the infected host to mine cryptocurrency Monero. “Adopting this strategy introduces an…

This story continues at The Next Web

. origin »

275 +