Off-topic for aiqbench
This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.
Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware

Earth Sirrush is hiding espionage malware inside PNG images and malicious Notepad++ plugins to compromise Ukrainian organizations. The Russia-aligned group has targeted government agencies, defense organizations, border guards, and logistics operators since at least 2022, repeatedly changing its tools to maintain access across the country’s wartime supply networks. The attacks begin with carefully tailored phishing […] The post Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware appeared first on Cyber Security News.
Earth Sirrush is hiding espionage malware inside PNG images and malicious Notepad++ plugins to compromise Ukrainian organizations. The Russia-aligned group has targeted government agencies, defense organizations, border guards, and logistics operators since at least 2022, repeatedly changing its tools to maintain access across the country’s wartime supply networks. The attacks begin with carefully tailored phishing messages, malicious archives, and documents impersonating trusted institutions. Earlier campaigns also exploited the WinRAR vulnerability CVE-2023-38831, while newer operations combine convincing download pages with concealed payloads and software components that appear…
Excerpt shown under the publisher's RSS terms · 86 words · full text and figures are on the publisher's site
Related coverage

Weekly Cyber Security Newsletter Bulletin – Certighost Exploit, Checkpoint 0-day, HTTP/2 Flaw, Notepad++ Plugin Abuse +20 Stories
Cybersecurity News · Jul 26, 2026

Weekly Cyber Security Newsletter– Claude Hacked 3 Companies, Cisco 0-Day, Word Copilot and VMware Flaw +20 Stories
Cybersecurity News · Aug 2, 2026

Friendly Fire: Hijacking Defensive Cyber AI Agents for Remote Code Execution
AI Now Institute · Jul 8, 2026

WordPress Plugin Flaw Exposes 5 Million Sites to SQL Injection Attacks
Cybersecurity News · Sep 3, 2026