The real story, such as it is, appears to be that someone made an MS Word macro which can load and execute malicious code from other files such as a jpeg, supposedly to make automated detection of it less likely.
this post was submitted on 13 May 2025
30 points (91.7% liked)
Cybersecurity
7561 readers
139 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub
Notable mention to !cybersecuritymemes@lemmy.world
founded 2 years ago
MODERATORS
MS Word eh? Figures.
This technique, which bypasses traditional antivirus systems, highlights an alarming evolution in cybercrime tactics.
It's called steganography and has been around for ages. I wrote code back in the, well let's just say "a while ago", that "hid" data in PNG files.
It was super easy too right? i want to say it was a simple batch file. I remember I had a .rar file full of pornography that I disguised as a shitty cat meme. I even tested out uploading it to some image hosting website to see if it would strip that data out and nope I was able to download a copy and open it with winrar no issues. I wonder of somewhere there is a shitty cat meme floating around the Internet with a bunch of porn hidden inside it.
I really, really hate this site. This is not the first time I've seen low quality garbage. It reports old news as crazy new novel techniques.
This is better than my CISA email alerts. What RSS feeds are you using? Can you share the XML?
Thanks but that's not an RSS feed
Calling steganography "Undetectable" is like a kid making a secret language that is just scrambled English words. Like yeah, it's hard to decode and it is a secret, but it is detectable and it still needs a base to work (ie an already existing language or in this case actually executed code)
This is not news.