North Korean cyberattackers conceal malicious software inside JPEG images

North Korean state-sponsored hackers from the APT37 group have developed sophisticated new attack methods that hide malicious software inside seemingly innocent JPEG image files, according to a comprehensive analysis by Genians Security Center.

This advanced steganography technique represents a significant evolution in cyber warfare tactics, making detection by traditional security systems complicated.

The newly discovered RoKRAT malware variant employs a two-stage encryption process that begins with malicious shortcut files disguised as legitimate documents.

Read more at Cyber Press