T1027 - Steganography

MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

November 2, 2025

Last Seen

December 16, 2025

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (8)

New .NET Malware Conceals Lokibot in Image Files to Evade Detection

Nov 19·3 sources

Malware Hidden in Firefox Extensions' Icons in GhostPoster Campaign

Dec 18·2 sources

GlassWorm Malware Resurfaces in Open VSX Extensions Following Token Leak

Nov 11·15 sources

Open VSX Registry Faces Security Incident with Leaked Tokens and Malicious Extensions

Nov 4·4 sources

ClickFix Malware Campaign Evolves with Advanced Deception Techniques

Nov 24·18 sources

1 / 2

Related Articles (5)

GhostPoster attacks hide malicious JavaScript in Firefox addon logos

Bleepingcomputer·Dec 16

Xillen Stealer Evolves With AI

Esecurityplanet·Nov 26

ClickFix attack uses fake Windows Update screen to push malware

Bleepingcomputer·Nov 24

New .NET Malware Conceals Lokibot Inside PNG/BMP Files to Bypass Detection

Cyberpress·Nov 19

Open VSX rotates tokens used in supply-chain malware attack

Bleepingcomputer·Nov 2

Related Entities

Gamaredon Lazarus Malware Phishing Supply Chain Attack Operation Endgame Azure Eclipse Foundation Microsoft Open VSX North Korea Russia