Terence EdenOct 8
@malwaretech I don't understand why they faked a JPG. Why not have a real JPG and embed the payload in the EXIF?
Show threadIvor Hewitt
@Edent @malwaretech I guess they just didn't need to, it caches the whole file this way, why bother going through the hassle of creating a header.
On the other hand... It would be so more insidious as an image with embedded exif since they wouldn't need the hidden JavaScript download, they could just include the image on the page and the code would lurk in the cache automatically.
Oct 8 at 6:33pmWeb
Show threadSqueaky Jetpack 🌻💭Oct 9
@ivor @Edent @malwaretech I honestly assumed that was the chosen method prior to reading the details.