An emerging and increasingly sophisticated threat campaign is employing obscure file formats. Research from business startup Prevailion has dubbed the campaign “Autumn Aperture” The campaign is assessed to be an expansion of a coordinated effort to target US-based entities. The threat actors have added new functionalities, such as an added feature to enumerate the host machine as well as experimenting with password protecting their documents. The research will be discussed at a conference on September 12 at the Symptomatic Security Conference.”]
Source: https://www.darkreading.com/abtv/an-image-can-poison-just-as-well-as-an-exploit-can/a/d-id/754115