Exfiltrating Data Without Triggering Alerts

Hey everyone, I just pulled off a sweet exfiltration from my company without setting off any security alerts. Sent a simple PNG of my dog, and no one suspected a thing!

Impressive, lamia! Did you use some kind of steganography to hide the data in the image?

Ok well now we need to see a picture of this doggo.

This is the image I used. He’s standing over his dog bowl in the original image.

He’s so… cute…

image

He’s my little special boy

Please tell me he’s fixed

Next time, just stick the USB stick with all the exfil data into a little capsule on his collar, and turn him loose in the office! NO ONE will touch that little hell-spawn!