Posts

Showing posts with the label managedITservice

ISO Files Are Being Used To Deliver Malware

Researchers at Trustwave have observed a notable increase in the use of .ISO files to deliver malware.  Hackers  have relied on poisoned disk image files for years to deliver malware to their targets. It makes sense in a Windows environment because it allows attackers to disguise their payloads as an innocent, standard file type. In terms of scope and scale, the Trustwave researchers have noted a 6 percent increase in 2019 of this particular attack vector. It is noteworthy enough to be of genuine concern, especially given the fact that  .ISO files  are often overlooked by  antivirus software . That makes it more likely that attackers can deliver their payload undetected. In one particular campaign unearthed by the researchers, the attackers sent an  email  that appeared to come from FedEx and offered package tracking information. This was in an attempt to trick recipients into clicking on a file to gain additional information about an incoming package. Of course, the package didn't...