More Than Meets the Eye: Exposing a Polyglot File That Delivers IcedID

Polyglot files, such as the malicious CHM file analyzed here, can be abused to hide from anti-malware systems that rely on file format identification.

The post More Than Meets the Eye: Exposing a Polyglot File That Delivers IcedID appeared first on Unit 42.

analysis cortex cortex xdr dns security evasion exposing icedid malware next generation firewall polyglot threat prevention url filtering wildfire