Post by CyberTech Intelligence

𝐎𝐢𝐥𝐑𝐢𝐠 𝐀𝐏𝐓 𝐇𝐢𝐝𝐞𝐬 𝐌𝐚𝐥𝐰𝐚𝐫𝐞 𝐂𝐨𝐧𝐟𝐢𝐠 𝐢𝐧 𝐆𝐨𝐨𝐠𝐥𝐞 𝐃𝐫𝐢𝐯𝐞 𝐈𝐦𝐚𝐠𝐞 A new cyberespionage campaign linked to OilRig is using advanced techniques to evade detection by hiding malware configurations inside images hosted on Google Drive. The attack begins with a phishing Excel file that deploys fileless malware, operating entirely in memory to avoid detection. It then leverages GitHub to retrieve instructions before downloading a seemingly harmless image. Using steganography, attackers embed encrypted data within the image, which is later extracted to guide the next stage of the attack. The malware communicates through Telegram, allowing attackers to send commands and exfiltrate data through legitimate encrypted traffic. This campaign highlights how threat actors are increasingly abusing trusted platforms and advanced techniques to bypass traditional security defenses. 𝐑𝐞𝐚𝐝 𝐭𝐡𝐞 𝐟𝐮𝐥𝐥 𝐧𝐞𝐰𝐬: https://lnkd.in/g2-fvJTT