Tracking Malware Campaigns With Reused Material, (Wed, Feb 18th)
SANS Internet Storm Center, InfoCON: green 2026-02-18
Summary:
A few days ago I wrote a diary called "Malicious Script Delivering More Maliciousness"[1]. In the malware infection chain, there was a JPEG picture that embedded the last payload delimited with "BaseStart-" and "-BaseEnd" tags.