TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks

The threat actor tracked as TA558 has been observed leveraging steganography as an obfuscation technique to deliver a wide range of malware such as Agent Tesla, FormBook, Remcos RAT, LokiBot, GuLoader, Snake Keylogger, and XWorm, among others.
"The group made extensive use of steganography by sending VBSs, PowerShell code, as well as RTF documents with an embedded exploit, inside

actor agent agent tesla attacks code formbook guloader hackers images keylogger lokibot malware malware attacks obfuscation powershell rat remcos remcos rat scale snake snake keylogger steganography ta558 tesla threat threat actor xworm