One of the methods hackers use to spread malware is steganography. By "steganography" we mean the hidden placement of code in various media, such as images and videos. This is a very effective technique, since it can bypass strong defense systems.
Recently, Kaspersky researchers discovered that a group of hackers is using a new approach to using steganography techniques. This group is known for its innovative ideas.
The group is called Platinum and is a well-known and sophisticated hacking group that researchers from all over the world have been monitoring since 2012. These hackers have often become a topic of discussion, thanks to their creativity, but also for carrying out attacks on government, military and diplomatic targets. One of the interesting methods of the Platinum group is the integration of malicious code into legitimate text.
Kaspersky researchers discovered this method, almost by accident, while monitoring what they thought were two separate campaigns. The first involved a backdoor and the second involved PowerShell scriptsused to steal data.
Ultimately, by combining all the evidence, the researchers concluded that it was not two separate campaigns. The backdoor was simply the second stage of a complex attack. However, the ultimate goal of the Platinum group remains unknown, for now.
The researchers stated the following:
“Two years ago, we predicted that increasingly more APT developers and malware authors would use encryption, as happened in this case”.
Unless you work for a government or military agency, it is unlikely that you will be targeted by Platinum hackers. However, their techniques will soon become known to the hacking community, so you should be extra careful and make sure your business is protected from online threats. Hackers are constantly evolving their methods and are always looking for the right opportunity to attack.
