Tracking Malware Campaigns With Reused Material, (Wed, Feb 18th)

SANS Internet Storm Center, InfoCON: green 2026-02-18

Summary:

A few days ago I wrote a diary called "Malicious Script Delivering More Maliciousness"[1]. In the malware infection chain, there was a JPEG picture that embedded the last payload delimited with "BaseStart-" and "-BaseEnd" tags.

Link:

https://isc.sans.edu/diary/rss/32726

From feeds:

Intel Hub ยป T01 - SANS Internet Storm Center, InfoCON: green

Tags:

Date tagged:

02/18/2026, 07:12

Date published:

02/18/2026, 03:19