Originally posted by ThePreacher
I downloaded this encryption program that hides files or even executable programs in a bitmap image. I was wondering if anyone else had used it and what they thought. I was also wondering if the same technology could be used to hide a malicious trojan inside a seemingly harmless bitmap image. I certainly hope it isnt possible, because I could see going to an infected website that releases a trojan into your system just by downloading their web page.
Uhm... AFAIK that's not gonna happen without a helper application. I mean, all that will happen is your image program will open the file, render what it can, and that's it. To assume that photoshop will automatically decipher any information hidden inside the picture and run it... That's giving Adobe a lot of credit in the 'features' department. It's like hiding a bomb with a 'enter-your-id-to-go-boom' panel on it within a painting. People are just gonna admire the painting, they aren't gonna figure out that you have to rip the painting open and take out the package and follow the instructions.

Originally posted by UberC0der
yep, I ran across a page in german that gives a pretty detailed how-to on doing just that. If it becomes a popular script kiddie thing it could lead to some major suckage for all involved in cleaning up the mess.
What do you mean? I could see this being a method to update trojans secretly, but hardly as a method to install the 'beachhead' trojan. You need something malicious in there in the first place to decipher the steno and then use the content.