Oh no, that James Webb Space Telescope snap might actually contain malware

Morning ATS Colleagues.

I popped this into Space Exploration as browsers here are likely more inclined to be looking at this image.

theregister.com_webb_telescope_malware

SNIP-
Scumbags are using a photo from the James Webb Space Telescope to smuggle Windows malware onto victims' computers – albeit in a roundabout way.

The malicious code, written in Go, is hidden in a .jpeg of the stunning first proper image taken by the recently deployed spacecraft.

More specifically, the obfuscated code is Base64-encoded and included in the .jpeg disguised as a certificate. The payload, dubbed GO#WEBBFUSCATOR, was not detected as malicious by antivirus engines in VirusTotal. This is all according to researchers at cybersecurity firm Securonix, who said they spotted and inspected the .jpeg's contents.

Just so people are aware eh.

Cheers and beers people.

a reply to: Cymru

Thanks for the info...

Very clever and devious.

a reply to: Cymru

Who? Who are the scumbags?

a reply to: Cymru

Good find Cymru.

I seem to recall picking up some ransomware, right good few years back now, down to what i think was an infected jpeg.

Easy enough to reinstall the OS, but because i was silly enough to have my backup drive plugged in at the time, i lost all the family photos and video to the tune of about 5 years worth.

a reply to: Cymru

How low certain groups can stoop is beyond me.

a reply to: Cymru

I wondered how that Geico ad got on the arm of a spiral Galaxy...

Not always mind you, but sometimes I'm glad I use an 8-year-old Mac.

a reply to: andy06shake

I have a 2TB drive from a failed NAS to recover.

In no rush to see ex Mrs' pics so it can stay in the attic for now

a reply to: Cymru

The infection starts with a phishing email that contains a Microsoft Office attachment named Geos-Rates[.]docx that, when opened, downloads a malicious template file that contains an obfuscated VBA macro that automatically executes – if the macro is allowed to run.

And people still get caught by phishing/malicious emails with dodgy attachments...

originally posted by: wildespace
a reply to: Cymru

The infection starts with a phishing email that contains a Microsoft Office attachment named Geos-Rates[.]docx that, when opened, downloads a malicious template file that contains an obfuscated VBA macro that automatically executes – if the macro is allowed to run.

And people still get caught by phishing/malicious emails with dodgy attachments...

Didn't Micro$ recently re-enable macros as well ?

I got that backwards

www.bleepingcomputer.com...

a reply to: Bluntone22

Customise and save with Liberty Mutual. I customise everything, like Marco's backpack.
*drone*