Monthly Archives: February 2014

Distributing malware via PNG metadata

Picture courtesy of : Source
Picture courtesy of : Source

iFrame is embedded on many sites, making drive-by-downloads easy and a preferred method for malware attacks. These type of malicious files are fairly easy to detect and fix. However, there is a new type that not so easy to detect- and it’s in HOW the malware is distributed by the iFrame. The attacker obscures the malware inside a PNG file. While this isn’t necessarily new, the devil is in the details. For more on the details, to see to complete article, and to see screenshots of the JavaScript file, please click the following link to take you to Securi Blog site.