Cryptography & Steganography
Browser extension malware analysis - using browser-xpi-malware-scanner.py to find malware in the wild
A Firefox YouTube-to-MP4 extension conceals a full C2 malware framework inside a PNG icon using steganography, Unicode obfuscation, a 72-hour sleeper, and live network rule injection.