Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware

Earth Sirrush, a Russia-aligned APT group, targets Ukrainian organizations using phishing emails with PNG steganography and malicious Notepad++ plugins to deploy espionage malware. Attacks focus on government, defense, and logistics sectors since 2022, employing tailored phishing and document-based delivery methods.

https://cybersecuritynews.com/earth-sirrush-uses-png/