Malware Hidden in Email Images Targets Gmail and Outlook Users

Cybersecurity researchers have issued a warning about two advanced malware threats, VIP Keylogger and 0bj3ctivityStealer, which exploit hidden code embedded in images within email messages. These threats target Gmail and Outlook users, among others, emphasizing the need for heightened vigilance. The malware campaigns leverage email techniques like invoices and purchase orders to spread malicious images. VIP Keylogger records keystrokes and extracts credentials, while 0bj3ctivityStealer steals account and credit card information. Both threats bypass traditional network security by embedding malicious code in images hosted on legitimate websites.

The HP Wolf security insights report revealed the scale of these threats, with one malicious image accessed over 29,000 times. Cybercriminals are employing sophisticated tactics, reusing and combining attack components to enhance their campaigns’ efficiency. The attacks highlight vulnerabilities in email-based communications, urging users to remain cautious when opening attachments or clicking on links in unsolicited emails.

Mitigation strategies include using recommended security apps that detect malware, phishing, and network threats. The Cyber Security Agency of Singapore (CSA) has tested apps for Android and iOS platforms, evaluating their ability to detect malicious samples, phishing links, and unauthorized modifications. While no app provides complete protection, CSA emphasizes the importance of maintaining good cyber hygiene and staying informed about anti-scam practices.

Google and Microsoft have also strengthened defenses for Gmail and Outlook users through AI advancements and premium security features, aiming to block threats more effectively. Gmail’s enhanced AI models, for example, have reduced spam by 20% by identifying malicious patterns. Similarly, Microsoft 365 accounts benefit from advanced filtering for attachments and links.

These developments underline the importance of using updated cybersecurity tools and exercising caution to defend against increasingly sophisticated cyber threats hidden in everyday communications.

Source: Forbes

The European Cyber Intelligence Foundation is a nonprofit think tank specializing in intelligence and cybersecurity, offering consultancy services to government entities. To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net, or you can try yourself using check.website.