"Global Enterprises Hit by Steganography Malware Attacks"

The threat actor TA558 has been using steganography to deliver various malware including Agent Tesla, FormBook, Remcos RAT, and others, with a campaign codenamed SteganoAmor. They have targeted sectors in Latin American countries and other regions, while also deploying Venom RAT via phishing attacks in several countries. The group has been observed using compromised SMTP servers and infected FTP servers to stage attacks and steal data. Additionally, another hacking group, Lazy Koala, has been targeting government organizations with a malware called LazyStealer, potentially linked to the group YoroTrooper. This activity is part of a broader trend of social engineering campaigns to spread malware.