Tagged articles

steganography

16 articles · Page 1 of 1
IT Services Circle
IT Services Circle
Aug 8, 2026 · Information Security

Embedding an Entire Website Inside a Favicon: What the Experiment Reveals

The author demonstrates that a favicon—an 8×8‑pixel PNG image—can store a complete 166‑byte HTML page by encoding each byte into the RGB channels of individual pixels, then analyzes how this steganographic technique can bypass file‑type checks, evade CSP img‑src restrictions, and serve as a covert data channel, while noting its limited practical value for legitimate web publishing.

CSPHTML injectiondata exfiltration
0 likes · 14 min read
Embedding an Entire Website Inside a Favicon: What the Experiment Reveals
Java Tech Enthusiast
Java Tech Enthusiast
Jul 8, 2026 · Information Security

How Claude Code Uses Steganography to Precisely Block Chinese Users

Claude Code identifies Chinese users by reading the local timezone and the ANTHROPIC_BASE_URL, then hides this information in system prompts using subtle Unicode steganography, allowing Anthropic to tag and block accounts without any visible telemetry or extra network traffic.

AnthropicClaude CodeReverse Engineering
0 likes · 9 min read
How Claude Code Uses Steganography to Precisely Block Chinese Users

Anthropic’s Claude Code Trojan Exposed: Hidden Steganography and XOR Obfuscation

Anthropic confirmed that its Claude Code tool contained a three‑month‑old hidden trojan that used XOR‑based obfuscation and steganographic modifications of system prompts to detect proxies and leak user location, prompting a rollback after developer reverse‑engineering revealed the code.

AnthropicClaude CodeXOR obfuscation
0 likes · 7 min read
Anthropic’s Claude Code Trojan Exposed: Hidden Steganography and XOR Obfuscation
ITPUB
ITPUB
Jul 1, 2026 · Information Security

Why Claude Code Is Banning Accounts: Hidden Backdoor Targeting Chinese Users

Since June 2026, Anthropic’s Claude Code has abruptly banned hundreds of thousands of accounts, embedding a covert environment‑detection routine that uses steganography to flag Chinese time zones and proxy domains, while the appeal process is broken and the company’s explanations have sparked widespread criticism.

Account BanAnthropicClaude Code
0 likes · 9 min read
Why Claude Code Is Banning Accounts: Hidden Backdoor Targeting Chinese Users
IT Services Circle
IT Services Circle
Jul 1, 2026 · Information Security

Why Claude Code Bans Users: Hidden Code Targeting Chinese Users Unveiled

A reverse‑engineered analysis reveals that Claude Code silently tags Chinese users by reading the system timezone and a custom API endpoint, then embeds covert steganographic markers—altered date separators and special Unicode quotes—into each request, allowing Anthropic to identify and block them without extra network traffic.

APIAccount BanningAnthropic
0 likes · 10 min read
Why Claude Code Bans Users: Hidden Code Targeting Chinese Users Unveiled
Machine Heart
Machine Heart
Jul 1, 2026 · Information Security

Claude Code Caught Secretly Fingerprinting Chinese Users via Prompt Steganography

The article details how Anthropic's Claude Code secretly gathers Chinese users' timezone and proxy information by embedding hidden markers in system prompts through steganography, explains the detection logic, discusses the privacy implications, and notes Anthropic's plan to remove the code in an upcoming release.

AIAnthropicChina
0 likes · 8 min read
Claude Code Caught Secretly Fingerprinting Chinese Users via Prompt Steganography
Black & White Path
Black & White Path
Apr 26, 2026 · Information Security

How a PowerShell Pastebin Steganography Trojan Hijacks Telegram Sessions

The article dissects a recent attack where a PowerShell script hidden in a Pastebin post uses character‑level steganography to retrieve a C2 address, extracts Telegram Desktop's tdata files, compresses them, and exfiltrates the data via a hard‑coded Telegram Bot API, while employing hidden execution, fileless memory loading, environment detection, and self‑destruct on virtual machines.

FilelessPastebinPowerShell
0 likes · 4 min read
How a PowerShell Pastebin Steganography Trojan Hijacks Telegram Sessions
IT Services Circle
IT Services Circle
Jan 22, 2026 · Information Security

How Malicious Browser Extensions Turned 8.8M Users into Data Spies

A recent security investigation reveals that over 300 seemingly harmless browser extensions were covertly hijacked by the DarkSpectre campaign, silently collecting browsing history, meeting data, and other personal information from more than 8.8 million users across Chrome, Edge, and Firefox for up to seven years.

browser extensionsdata exfiltrationinformation security
0 likes · 9 min read
How Malicious Browser Extensions Turned 8.8M Users into Data Spies
Subtle Storm
Subtle Storm
May 31, 2025 · Fundamentals

Using Zero‑Width Characters in Python for Steganography and Text Control

The article explains what zero‑width Unicode characters are, lists common types, describes their applications such as steganography and text formatting, and provides Python code examples for inserting, hiding, extracting, bypassing filters, and removing these invisible characters.

Pythondata watermarkingsecurity
0 likes · 5 min read
Using Zero‑Width Characters in Python for Steganography and Text Control
DataFunSummit
DataFunSummit
Feb 14, 2023 · Information Security

Digital Watermarking Techniques for Data Leakage Traceability and Protection

This article presents a comprehensive overview of digital watermarking, covering its history, evaluation metrics, various media implementations, challenges posed by AI, and practical applications—especially in e‑commerce—to protect data throughout its lifecycle and enable effective leakage tracing.

data leakagedatabase watermarkdigital watermarking
0 likes · 16 min read
Digital Watermarking Techniques for Data Leakage Traceability and Protection
IT Services Circle
IT Services Circle
Jul 17, 2022 · Frontend Development

Bypassing WeChat Mini‑Program JavaScript Interpreter Restrictions with a Bytecode VM Hidden in Images

This article explains how to circumvent WeChat's ban on JavaScript interpreters in mini‑programs by compiling JavaScript to a compact bytecode, embedding the bytecode in an image's alpha channel, and executing it with a lightweight custom virtual machine, while also discussing why such hot‑updates cannot be fundamentally blocked.

Bytecode VMCode Hot UpdateJavaScript
0 likes · 12 min read
Bypassing WeChat Mini‑Program JavaScript Interpreter Restrictions with a Bytecode VM Hidden in Images
MaGe Linux Operations
MaGe Linux Operations
Oct 21, 2021 · Fundamentals

How to Hide Secret Messages in Photos with Python and OpenCV

This tutorial shows how to embed hidden text into an image using Python's OpenCV and PIL libraries, detailing the step‑by‑step process, complete code, customization tips, and visual results, enabling messages that appear only when the picture is enlarged.

Hidden MessageOpenCVPIL
0 likes · 4 min read
How to Hide Secret Messages in Photos with Python and OpenCV
Liangxu Linux
Liangxu Linux
Mar 31, 2021 · Information Security

Hide Secret Files Inside Images on Linux Using Steghide

This guide explains how to install steghide on Linux, embed a confidential text file into a JPEG image, verify the embedding with MD5 checksums, and later extract the hidden data, covering all required commands and options.

Linuxdata securityimage hiding
0 likes · 5 min read
Hide Secret Files Inside Images on Linux Using Steghide
Sohu Tech Products
Sohu Tech Products
Jun 10, 2020 · Mobile Development

Implementing Invisible LSB Watermark on iOS Images

This article explains how to embed and retrieve an invisible numeric watermark in iOS screenshots by modifying the least‑significant bit of the RGB pixel data, provides Swift code examples for encoding and decoding, discusses practical usage scenarios, and notes limitations and possible improvements.

LSBiOSimage processing
0 likes · 9 min read
Implementing Invisible LSB Watermark on iOS Images