Fascinating images with malware from the James Webb telescope
Hackers hide malware in James Webb telescope images: Threat analysts have discovered a new malware campaign dubbed “GO#WEBBFUSCATOR” targeting phishing emails, malicious documents and space images from the James Webb telescope supports to spread malware. The infection begins with a phishing email with an attached malicious document, 'Geos-Rates.docx', that downloads a template file. This file contains an obfuscated VBS macro that runs automatically if macros are enabled in the Office suite. The code then downloads a JPG image ('OxB36F8GEEC634.jpg') from a remote resource ('xmlschemeformatcom'), decodes it into an executable file ('msdllupdate.exe') using certutil.exe and launches it. Tempting images…