FBI PIN: Cyber Actors Leveraging Malvertising with Hybrid Obfuscation Techniques to Deliver Malware

The FBI has published a Private Industry Notification noting that it has observed cyber actors leveraging malicious advertising (malvertising) with hybrid techniques such as digital steganography and fileless malware to evade detection and improve computer intrusion capabilities. These techniques often take advantage of administrative tools such as PowerShell, which are already present on a victim’s system. Over the past year, cyber actors have used these hybrid techniques to steal personally identifiable information, financial information, deploy ransomware, and gain unauthorized accesses to US networks. The PIN contains additional information on the threat and recommendations for recommendations for protecting systems from this activity.