A security researcher from India has developed a technique to hide malicious code in digital images. The technique, dubbed “Stegosploit,” hides malicious code inside the pixels of an image, hiding a malware exploit in plain sight. Shah demonstrated the technique during a talk titled, “” he gave on Thursday at the Amsterdam hacking conference Hack In The Box. The malicious code, dubbed IMAJS, is a combination of both image code as well as JavaScript hidden into a JPG or PNG image file. Shah also has programmed his malicious image to do more stealthy tasks, like downloading and installing spyware on victim’s machine.
Source: https://thehackernews.com/2015/06/Stegosploit-malware.html