NEXUS8by 8bitsecurity
SearchSignalRadarIOCsWatchlist
Sign inPremium
SearchSignalRadarIOCsWatchlist
Sign inPremium
Search/f5f1eb6d43dd61d5b069c250e5c666384f7417d0c95014773bf9edf8ff13bebe
● IOC

f5f1eb6d43dd61d5b069c250e5c666384f7417d0c95014773bf9edf8ff13bebe

View graph Watch Export
Type
SHA-256
Source
News extraction
First seen
Sep 21, 2026
Last seen
Sep 21, 2026
Look up on VirusTotal
Reported by
1
TerminalFix: PNG Steganography, (Mon, Sep 21st)SANS ISCSep 21, 2026
Connections
1 relationships
TerminalFix: PNG Steganography, (Mon, Sep 21st)
Microsoft Security Research published an interesting blog post "TerminalFix campaign deploys a reverse tunnel through multistage intrusion" about a malware campaign. The aspect that I want to take a closer look at, is the fact that the threat actors used PNG files with steganography. I reached out to the researchers and they kindly shared the IOCs for the PNG files with me.
isc.sans.eduSep 21, 2026extracted
Nexus8 is a project by 8bitsecurity.com
Privacy PolicyTerms of ServiceCookie PolicyContact·LinkedInTelegramMastodon