nerdexam
GIAC

GCFA · Question #182

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so, he

The correct answer is C. Steganography. Steganography is the practice of concealing secret data inside a non-secret carrier file, such as embedding information within an image, to avoid detection.

Memory Forensics & Anti-Forensics Detection

Question

John used to work as a Network Administrator for We-are-secure Inc. Now he has resigned from the company for personal reasons. He wants to send out some secret information of the company. To do so, he takes an image file and simply uses a tool image hide and embeds the secret file within an image file of the famous actress, Jennifer Lopez, and sends it to his Yahoo mail id. Since he is using the image file to send the data, the mail server of his company is unable to filter this mail. Which of the following techniques is he performing to accomplish his task?

Options

  • AEmail spoofing
  • BSocial engineering
  • CSteganography
  • DWeb ripping

How the community answered

(44 responses)
  • A
    7% (3)
  • B
    2% (1)
  • C
    82% (36)
  • D
    9% (4)

Why each option

Steganography is the practice of concealing secret data inside a non-secret carrier file, such as embedding information within an image, to avoid detection.

AEmail spoofing

Email spoofing involves forging email header fields (such as From or Reply-To) to make a message appear to originate from a different sender, not hiding data inside image files.

BSocial engineering

Social engineering involves manipulating people through psychological tactics to obtain information or access, not technically concealing data within files.

CSteganographyCorrect

Steganography hides the existence of a message by embedding it within an innocuous carrier file - in this case, an image of a celebrity. Unlike encryption which makes data unreadable, steganography makes the hidden data invisible to inspection, which is why the mail server's content filters could not detect the exfiltrated information. Tools like 'image hide' automate this embedding process at the bit level.

DWeb ripping

Web ripping refers to copying or downloading the full content of a website, which is entirely unrelated to hiding data inside image files.

Concept tested: Steganography for data exfiltration via image files

Source: https://csrc.nist.gov/glossary/term/steganography

Topics

#steganography#data hiding#image file covert channel#anti-forensics technique

Community Discussion

No community discussion yet for this question.

Full GCFA Practice