A recently discovered piece of malware has a unique way of communicating with its creator—through an internet meme posted on Watch Actresses' Survival Skills OnlineTwitter.
The mysterious hacker has been using the "What if I told you" meme to secretly tell a Windows-based strain of malware when to grab screenshots from infected PCs, according to security firm Trend Micro.
SEE ALSO: Why every super paranoid internet user needs a cheap ChromebookAlthough the internet meme look like an ordinary digital image, a simple command is hidden in the file's metadata, Trend Micro VP Mark Nunnikhoven says. The malware, on other hand, has been designed to look up the hacker's Twitter account and scan image files for the secret commands.
"The messages used for this malware are very small (typically one word) meaning that they can be hidden between the metadata and actual pixel layout without changing the image itself," Nunnikhoven said in an email.
The hacker appears to have only posted two malicious memes — on Oct. 25 and 26 — with the command "/print," which will order infected Windows PCs to take a screenshot. Other hidden commands the hacker could've sent through the memes include "/clip" to capture clipboard copied content, and "/processos" to retrieve a list of running processes over the PC.
The practice of concealing messaging in nontext files such as images or video is called steganography, and it's become an effective way for hackers to sneak malicious code onto people's computers or send hidden commands over the open web.
"Most networking monitoring programs won't notice anything odd about access to Twitter.com," Nunnikhoven added. "A site that's based around a timeline like Twitter also allows the attacker to sequence commands for the malware. This can be an effective way of building a solid command and control channel."
The good news is that Twitter has disabled the hacker's account on its platform. But it isn't clear how the mysterious attacker was circulating the malware, a Trojanized .exe file.
In response to Trend Micro's findings, Twitter told PCMag: "Keeping people safe and secure on Twitter is our top priority. If content on Twitter is used for malicious purposes, we take action and remove it. Twitter plays no part in the distribution of the malware involved in this campaign."
However, the company didn't address questions over what Twitter can do to stop similar meme-based malware schemes in the future. Meanwhile, others have shown you can cram a whole lot of data, include ZIP archives, inside an image on Twitter, raising the possibility that hackers could employ the same tactic again.
Topics Cybersecurity X/Twitter Memes
Previous:Citizen Zuckerberg
Mum hopes magic royal Christmas photo will fund daughter's educationNYC bar really wants to teach people how to throw axesThis nasty Android malware caused a phone to overload and bulgeThese people definitely weren't paying attention when they bought holiday wrapping paperFacebook fake news update abandons disputed flags for related articlesWindows 10 facial recognition if fooled by security researchersOnePlus may take on Apple and Samsung with new flagship model in March‘Sesame Street’ awarded $100 million grant to bring interactive education to refugee childrenThere's a problem with the way bipolar disorder is represented in stock imagesUse this tool to see if you followed any fake Russian Facebook pagesLupita Nyong'o on the female relationships in 'Black Panther'What's coming to Hulu in January 2018Queer cinema of 2017: Here's our picksWhy Apple slowing your iPhone down is a double betrayalHackers replace cryptocurrency exchange EtherDelta with a fake siteThis secret HQ trivia cheat will earn you one extra lifeQantas reveals the movies people watch the most on its planesGlobal warming could spark future refugee crises as crops fail‘Sesame Street’ awarded $100 million grant to bring interactive education to refugee childrenBest TV Christmas episodes to watch today Louise Erdrich Wins NBA for Fiction by Sadie Stein The Other Election by Casey N. Cep Apple iOS 17: What to expect at WWDC 2023 On This Day by Sadie Stein Iowa Senator owned by an extremely Midwest question about soybeans The Word of the Year, and Other News by Sadie Stein Everything you need to know about celebrating Halloween safely Bonfire Night by Sadie Stein iOS 17 at WWDC 2023: See key features announced Sandy’s Aftermath by Sadie Stein The weirdest year of my life made me fall in love with alone time The Vatican is Not a Fan of J.K. Rowling’s Adult Oeuvre, and Other News by Sadie Stein Trump gets roasted for 'dancing' to the Village People Twitter and Reddit's high In Which Philip Roth Announces His Retirement (in English) by Nelly Kaprielian Amazon Prime could include cell service someday Walker Percy's Hurricane by Spencer Woodman A Letter from Van Gogh by Sadie Stein Simone Giertz built a photo booth that lets her dog take selfies for treats Apple watchOS 10 might be all about widgets
2.2044s , 8223.03125 kb
Copyright © 2025 Powered by 【Watch Actresses' Survival Skills Online】,Charm Information Network