Feeds

iFrame attack injects code via PNGs

Old malware, new trick

5 things you didn’t know about cloud backup

Security vendor Sucuri is warning that it's spotted an attack in the wild that embeds malicious code in PNG files.

The iFrame injection attack loaded a valid jquery.js file with very little to alert even the researcher that something else was going on. As the company writes in this blog post, the only red flag in the code was a loadFile() function downloading dron.png into the iFrame.

As Sucuri's Peter Gramantik writes, the loading of the PNG is followed by a decoding loop, and this is where life gets more interesting. The decoding loop, he writes, is “taking the normal behaviour of an iFrame injection, embedding it within the meta of the PNG file, and just like that we have a new distribution mechanism.”

So the user doesn't notice anything happening, the iFrame is loaded at -1000px – meaning it's placed off-screen.

Securis iFrame attack payload

The payload turned up by Sucuri

Sucuri notes that the techniques used in this case could also be applied to other image types. Naturally, as the discoverer, Sucuris has added the attack to its scanner; El Reg expects other vendors will follow suit. ®

5 things you didn’t know about cloud backup

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?