Printable View
I downloaded this encryption program that hides files or even executable programs in a bitmap image. I was wondering if anyone else had used it and what they thought. I was also wondering if the same technology could be used to hide a malicious trojan inside a seemingly harmless bitmap image. I certainly hope it isnt possible, because I could see going to an infected website that releases a trojan into your system just by downloading their web page.
When it is encoded in a bitmap the data is not "Executed" when viewed with a graphic viewer.. more or less the data is skipped over. But when using the program to extract the data then it could be executed by the user.. but hey. how often would u see a 50 x 50 pixel bitmap that is over five megs? hahaha So mainly text files could be stored in bmps.Quote:
Originally posted by ThePreacher
I downloaded this encryption program that hides files or even executable programs in a bitmap image. I was wondering if anyone else had used it and what they thought. I was also wondering if the same technology could be used to hide a malicious trojan inside a seemingly harmless bitmap image. I certainly hope it isnt possible, because I could see going to an infected website that releases a trojan into your system just by downloading their web page.
This is OLD technology.
yep, I ran across a page in german that gives a pretty detailed how-to on doing just that. If it becomes a popular script kiddie thing it could lead to some major suckage for all involved in cleaning up the mess.
Uhm... AFAIK that's not gonna happen without a helper application. I mean, all that will happen is your image program will open the file, render what it can, and that's it. To assume that photoshop will automatically decipher any information hidden inside the picture and run it... That's giving Adobe a lot of credit in the 'features' department. It's like hiding a bomb with a 'enter-your-id-to-go-boom' panel on it within a painting. People are just gonna admire the painting, they aren't gonna figure out that you have to rip the painting open and take out the package and follow the instructions.Quote:
Originally posted by ThePreacher
I downloaded this encryption program that hides files or even executable programs in a bitmap image. I was wondering if anyone else had used it and what they thought. I was also wondering if the same technology could be used to hide a malicious trojan inside a seemingly harmless bitmap image. I certainly hope it isnt possible, because I could see going to an infected website that releases a trojan into your system just by downloading their web page.
What do you mean? I could see this being a method to update trojans secretly, but hardly as a method to install the 'beachhead' trojan. You need something malicious in there in the first place to decipher the steno and then use the content.Quote:
Originally posted by UberC0der
yep, I ran across a page in german that gives a pretty detailed how-to on doing just that. If it becomes a popular script kiddie thing it could lead to some major suckage for all involved in cleaning up the mess.
Does no one see my post?Quote:
Originally posted by evilseed
When it is encoded in a bitmap the data is not "Executed" when viewed with a graphic viewer.. more or less the data is skipped over. But when using the program to extract the data then it could be executed by the user.. but hey. how often would u see a 50 x 50 pixel bitmap that is over five megs? hahaha So mainly text files could be stored in bmps.
This is OLD technology.
Let me sum it up.. Sure you can hide data in a image file.. But the data is useless unless the intended person extracts the data. No image viewer will extract or execute the hidden data in the file.. the image viewer will simply skip over it....
Ok?
It seems this has been done with pdf files.....
http://www.coderz.net/zulu/outlook.pdfworm.txt
It seems that I remember something from adobe's page about a new implementation of embedded objects within pdf files and the use of OLE for activation of those objects.
I'll have to go dig again, but I do know macafee has announced support for pdf formats in their virus scan products.
cheers
Does no one hear my screams?
Yeah i presume that you'd have to have another aplication to extract the code for you.Quote:
Originally posted by Terr
Uhm... AFAIK that's not gonna happen without a helper application.
LOL :p . Surely those who rip open the painting will be clever enough not to follow the instructions though? :D j/kQuote:
Originally posted by Terr
It's like hiding a bomb with a 'enter-your-id-to-go-boom' panel on it within a painting.
Nice idea (dammit why don't i think of that kinda thing). Could be a nice way to update a trojanQuote:
Originally posted by Terr
I could see this being a method to update trojans secretly, but hardly as a method to install the 'beachhead' trojan. You need something malicious in there in the first place to decipher the steno and then use the content.