Beyond the surface: uncovering hidden threats in online ads
summary
Ad images hide executable payloads via steganography—tweaking the least significant bit of pixels to carry JavaScript that a paired encoder and listener will activate. Recent examples: a 2025 Colombian campaign impersonating judicial bodies, TA588 using an ad-laden phishing email against an Iranian oil company, and legacy malvertising in BNG banners; one sample bypasses detection on 63 engines missed. Practical defenses prototype in-browser AI scanners that flag stego patterns before rendering, though prompt‑injection risks against models remain.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:07Ads as security threats
- 4:21Steganography in online ads
- 7:15How steganography attacks work
- 9:05AI detection methods
- 10:34Q&A session
related talks
57mHiding In Plain Sight - Advances In Malware Covert Communication Channels
55mModern Malvertising ...
54mModern Malvertising and Malware web-based exploit campaigns
58mStegospolit - Exploit Delivery With Steganography and Polyglots
30mSecrets in the Pixels! Exploring Steganography
52mFlying Under the Radar - New Security Evasion Techniques
30mThe Hidden Layer of Cyberattacks
30mTracking Threat Actors Using Images: A Hunting & Analysis Approach