A new steganographic malware operation uses JPEG image files to deliver password-stealing malware. The attack, discovered by SEQRITE security researchers, hides malicious payloads within image files, enabling threat actors to evade traditional detection mechanisms. The malware primarily focuses on credential harvesting, targeting browsers, email clients, and FTP applications to extract sensitive data.

'I'm not a robot' malware scam weaponizes CAPTCHA verification tests against users – New York Post
‘I’m not a robot’ malware scam weaponizes CAPTCHA verification tests against users New York Post


